4 posts with tag networking

haproxy-spoe-rs: A Rust SPOA Agent Library for HAProxy

Building a HAProxy Stream Processing Offload Agent (SPOA) library in Rust — zero-dependency async design, mpsc write batching, 95.9% test coverage, and 2.8–4.9× higher throughput than the Go reference implementation.

· 14 minutes reading time

Running pdns_recursor as a root-independent validating resolver

How to configure PowerDNS Recursor 5.4 to resolve directly against TLD name servers without depending on the root name servers at runtime, using a local root.zone file loaded via zonetocaches — including DNSSEC validation, trust anchor setup, and the race condition that prevents it from working without a hint file.

· 7 minutes reading time

Running a validating DNS recursor from the root zone with Hickory DNS

How to run Hickory DNS as a full recursive resolver starting from the root zone, with DNSSEC validation, TLS-encrypted upstream connections, Happy Eyeballs, and Prometheus metrics — including all configuration options added in the recurser-from-root-zone branch.

· 12 minutes reading time

tls-proxy-tunnel: Transparent TLS Tunnelling Through Corporate HTTP Proxies

How tls-proxy-tunnel (tpt) uses SNI peeking to tunnel TLS connections through corporate HTTP CONNECT proxies without ever terminating TLS — layer 4, zero config on the client side.

· 3 minutes reading time