271
Tiny Docker Operating Systems
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
Topics /
Systems & Performance
The most popular blog posts about systems & performance on Hacker News. 301 posts.
272
273
274
10Gbit/s full TX wirespeed smallest packet size on a single CPU core
The Linux Kernel Network Stack Scalability, mitigating DDoS attacks firewalling iptables netfilter connection tracking (conntrack)
275
Call Me Maybe: Percona XtraDB Cluster
Percona’s CTO Vadim Tkachenko wrote a response to my Galera Snapshot Isolation post last week. I think Tkachenko may have misunderstood some of my results, and I’d like to clear those up now. I’ve ported the MariaDB tests to Percona XtraDB Cluster, and would like to confirm that using exclusive write locks on all…
276
Fedora 23 Beta released
The Fedora 23 Beta is here, right on schedule for our planned October final release! Want to help make Fedora 23 be the best release ever, or just want to get a sneak peek? Download the prerelease from our Get Fedora site and give it a whirl: Get Fedora 23 Beta Workstation — a reliable, user-friendly, […]
277
W^X policy violation affects Windows drivers compiled in VS 2013 and previous
Back in June, I was doing some analysis on a Windows driver and discovered that the INIT section had the read, write, and executable characteristics flags set. Windows executables (drivers included…
278
The Death of the Von Neumann Architecture
Lots of exciting new things were announced at the latest Apple WWDC this week, but hidden amongst the big announcements was an extension of something that's been bothering me for a while.
279
280
Signalfd is useless
UNIX (well, POSIX) signals are probably one of the worst parts of the UNIX API, and that’s a relatively high bar. A signal can be sent to your program at any point when it’s running, and you have to deal with it somehow. Traditionally, there are three ways …
281
On Go, Portability, and System Interfaces
I've been noticing more and more lately that we have a plethora of libraries and programs written for Go, which don't work on one platform o...
282
Searching 20 GB/sec: Systems Engineering Before Algorithms (2014)
SentinelOne unifies AI-powered endpoint, cloud, identity, and data protection—enhanced by our Security Data Lake for seamless and efficient cybersecurity.
283
284
Windows 10 is unfinished
Paying customers better get used to crowdsourced beta testing.
285
Is the Mill CPU real? (2014)
I’ve seen the Mill CPU come up a number of times — maybe because I subscribed to their updates and so I get emails about their talks. They’re getting a bunch of buzz, but every t…
286
Nginx with dynamic upstreams
I recently made a setup at work where I had a Nginx server facing the user, which would forward requests to a service running behind an AWS Elastic Load Balancer (aka. ELB). That in itself doesn’t sound like a difficult task, you just find the hostname for the ELB and point Nginx at it with a proxy_pass statement like…
287
The Inside Story Behind MS08-067
Access to this page requires authorization. You can try signing in or changing directories .
288
Notes on Red Star OS 3.0
How to navigate North Korea's home-grown Linux distribution.
289
Service-Disoriented Architecture
“You can have a second computer once you’ve shown you know how to use the first one.” -Paul Barham The first rule of distributed systems is don’t distribute your system until you have an observable reason to. Teams break this rule on the regular. People have been talking about service-oriented architecture for a long…
290
291
The Curious Case of Linux Containers
The next person that says “Linux Containers will solve all our problems” is going to get taken out back and shot. This is a surefire way to…
292
293
Project Silk
Editor's Note: An earlier version of this post appeared on Mason Chang's personal blog. For the past few months, I've been working on Project Silk which improves smoothness across ...
294
295
To ECC or Not to ECC
On one of my visits to the Computer History Museum – and by the way this is an absolute must-visit place if you are ever in the San Francisco bay area – I saw an early Google server rack circa 1999 in the exhibits. Not too fancy, right? Maybe even… a
296
The Systemd Chronicles
There is a menace which is spreading like a disease throughout the Linux world, it is called systemd .
297
Test iOS and Android Audio Latency with Superpowered Latency Test App
iOS and Android Audio Latency Test App with round-trip audio latency data for Apple, Samsung Galaxy, Xiaomi, LG, HTC, Nexus, Motorola, Sony, etc. devices.
298
There Is No Thread
This is an essential truth of async in its purest form: There is no thread.
299
Understanding Container Reuse in AWS Lambda
Tim Wagner, AWS Lambda AWS Lambda functions execute in a container (sandbox) that isolates them from other functions and provides the resources, such as memory, specified in the function’s configuration. In this article we discuss how Lambda creates and reuses these sandboxes, and the impact of those policies on the…
300
Will ZFS and non-ECC RAM kill your data?
This comes up far too often, so rather than continuing to explain it over and over again, I’m going to try to do a really good job of it once and link to it here.