[B! h2o] mapk0yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mapk0y id:mapk0y

h2oã«é–¢ã™ã‚‹mapk0yã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (34)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

H2O ã‚’ãƒˆãƒ¬ãƒ¼ã‚¹ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸ | Toru Maesaka
H2O ãŒå‡¦ç†ã™ã‚‹ HTTP ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ BPF ã‚„ DTrace ã§ãƒˆãƒ¬ãƒ¼ã‚¹å¯èƒ½ã«ãªã‚Šã¾ã—ãŸã€‚ ä»Šå›žã¯ Fastly ã§ã®ä»•äº‹ã®ä¸€è²«ã¨ã—ã¦è²¢çŒ®ã•ã›ã¦ã‚‚ã‚‰ã„ã¾ã—ãŸ (#2194 ã‚„ #2182)ã€‚ Fastly ã¯ H2O ã‚’æœ€å‰ç·šã§æŽ¡ç”¨ã—ã¦ã„ã‚‹ã®ã§ã€ã‚¹ã‚¿ãƒƒãƒ•ãŒãƒˆãƒ©ãƒ–ãƒ«ã‚·ãƒ¥ãƒ¼ãƒˆã—ã‚„ã™ãã™ã‚‹ã“ã¨ãŒç›®çš„ã§ã™ã€‚ ã¤ã„å…ˆæ—¥ã€ãƒ‹ãƒ¥ãƒ¼ãƒ¨ãƒ¼ã‚¯ã§ Kazuho ã•ã‚“ã¨è«–è°ã™ã‚‹æ©Ÿä¼šãŒã‚ã£ãŸãŠã‹ã’ã§ã€Logging ã«é©ã—ãŸé«˜ãƒ¬ã‚¤ãƒ¤ã® USDT Probe ã‚’ã‚¹ãƒ ãƒ¼ã‚ºã«çµ„ã¿è¾¼ã‚ã¾ã—ãŸã€‚ èƒŒæ™¯æŠ€è¡“ã‚„ä½¿ã„æ–¹ã¯ã„ãšã‚Œã€å…¬å¼ãƒãƒ¥ãƒ¼ãƒˆãƒªã‚¢ãƒ«ãªã©ã§ç´¹ä»‹ã—ã¾ã™ã€‚ ä»Šã™ãè©¦ã—ãŸã„å ´åˆã¯ä¸‹è¨˜ã®è³‡æ–™ã‚’å‚è€ƒã«ã—ã¦ã‚‚ã‚‰ãˆã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ https://torumk.com/h2o/tracing (æ¦‚è¦) https://github.com/toru/h2olog (BPF Client å®Ÿè£…) ã‚ã‚ã›ã¦èªã¿ãŸã„
mapk0y 2019/12/20
bpf

h2o
ãƒªãƒ³ã‚¯
HTTP/2ã§ é€Ÿããªã‚‹ã¨ã ãªã‚‰ãªã„ã¨ã
The document discusses the performance of HTTP/2 compared to HTTP/1.1 across different network conditions. It summarizes results from testing 8 real websites under 16 bandwidth and latency combinations with varying packet loss rates. Overall, HTTP/2 performs better for document complete time and speed index, especially on slower connections, though results vary depending on the specific site and m
mapk0y 2018/04/18
h2o

network
ãƒªãƒ³ã‚¯
H2Oã‚’Dockerä¸Šã§Non rootã§å‹•ã‹ã™ - Qiita
H2Oã‚’dockerä¸Šã§80/443ã§å‹•ä½œã•ã›ãŸã„å ´åˆã€èµ·å‹•å¾Œsetuidã«ã‚ˆã‚Šh2o.confã®userã¨ã—ã¦å‹•ããŸã‚ã€Dockerfileä¸ã§ã¯rootã¨ã—ã¦H2Oã‚’èµ·å‹•ã™ã‚‹ èƒŒæ™¯ http serverã¯non rootã§å‹•ã‹ã—ãŸã„ã€‚ ãã—ã¦è¤‡æ•°ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æŒã¤(IPv4 dhcp,autoip,IPv6ãªã©)ãŸã‚ã€IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æŒ‡å®šã›ãšã«ä»»æ„ã®ã‚¢ãƒ‰ãƒ¬ã‚¹INADDR_ANY(0.0.0.0)ã§å¾…ã¡å—ã‘ãŸã„ã€‚ ã—ã‹ã—port:80ãªã©ã®1024æœªæº€ã®ãƒãƒ¼ãƒˆç•ªå·ã¯ã€CAP_NET_BIND_SERVICEæ¨©é™ã‚’æŒã¤ãƒ—ãƒã‚»ã‚¹ã®ã¿ãŒbindã§ãã‚‹ã¨ãªã£ã¦ã„ã‚‹ãŸã‚ã€æ¨©é™ãŒãªã„ã¨ã‚¨ãƒ©ãƒ¼(EACCES)ã«ãªã£ã¦ã—ã¾ã†ã€‚ ãƒžãƒ‹ãƒ¥ã‚¢ãƒ« nginx nginxã¯ãƒ—ãƒã‚»ã‚¹åˆ†é›¢ã¨ã„ã£ãŸå¯¾ç–ã‚’å–ã£ã¦ã„ã‚‹ã€‚rootã§èµ·å‹•ã€port:80ã‚’bind,ãã®å¾Œforkã—ã€ä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§å‹•ã H2O H2Oã¯roo
mapk0y 2018/04/16
docker

h2o
ãƒªãƒ³ã‚¯
mruby gateway for huge amount of realtime data processing
mapk0y 2017/09/27
h2o
ãƒªãƒ³ã‚¯
EC-CUBEã‚’h2oã¨é€£æºã•ã›ã¦docker for macã§å‹•ã‹ã—ã¦osxfsãŒå¤§å¤‰é…ã„ã“ã¨ã‚’ä½“æ„Ÿã—ãŸä»¶ - non vorrei lavorare
ãŠã¯ã‚ˆã†ã”ã–ã„ã¾ã™ã€‚ãªã‹ãªã‹æ¬¡ç”·ã®ãŠã‚€ã¤ãŒå¤–ã‚Œã¾ã›ã‚“ã€‚ãã‚Œã©ã“ã‚ã‹ã€ã“ã“æœ€è¿‘ã€ã‚ˆãæ¼ã‚‰ã—ã¾ã™ã€‚@kjunichiã§ã™ã€‚ èƒŒæ™¯ å‰ã€…ã‹ã‚‰ã€EC-CUBEã‚’å‹•ã‹ã—ãŸã„ã¨ã¯æ€ã£ã¦ã„ãŸã€‚ æœ€è¿‘Windowså‘ã‘ã®è¨˜äº‹ãŒå¤šã‹ã£ãŸã‘ã©ã€ä»Šå›žã¯Macã§ã‚„ã£ã¦ã¾ã™ã€‚ ã“ã©ã‚‚ãŸã¡ã¨ã®ã‚ãã³ã‚’ãªã‚“ã¨ã‹è‡ªåˆ†ã®è¶£å‘³ã¨ã‚‚ã‹ã‚‰ã‚ã¦ä½•ã‹ã§ããªã„ã‹ã¨ã€ç„¡ã„é ã²ãã£ã¦è€ƒãˆã¦ã¿ãŸã€‚ 21ä¸–ç´€ã§ãŠåº—ã‚’é–‹ã‘ã°ã€å½“ç„¶ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã§ã®åº—èˆ—ã‚‚å¿…è¦ã§ã™ã‚ˆãã€ã‚€ã—ã‚ã€å®Ÿåº—èˆ—ã‚’ã‹ã¾ãˆãªã„æ–¹ãŒ 21ä¸–ç´€ã¯ä¸»æµã§ã¯ãªã‹ã‚ã†ã‹ã¨ã€‚ ãã“ã§ã€EC-CUBEã‚’ã†ã”ã‹ã—ã€21ä¸–ç´€ã®ãŠåº—å±‹ã•ã‚“ã”ã£ã“ã‚’ã™ã‚‹ã¨ã„ã†éŠã³ã‚’ã™ã‚‹ã¹ãã€æ—©é€Ÿæº–å‚™ã«å…¥ã£ãŸã€‚ Dockerã§EC-CUBEã‚’ã†ã”ã‹ã™ Qiitaã®è¨˜äº‹ ã¼ãã®ã‹ã‚“ãŒãˆãŸã•ã„ãã‚‡ã†ã®EC-CUBE3é–‹ç™ºç’°å¢ƒ - Qiita ã‚’å‚è€ƒã«ã‚„ã£ã¦ã¿ã‚‹ã“ã¨ã«ã€‚ å‹•ã‹ã—ãŸãŒã€ãƒ¡ãƒãƒ£ãŠãã„ docker-syncãªã‚‹ã‚‚ã®ã‚’
mapk0y 2017/03/12
docker

h2o
ãƒªãƒ³ã‚¯
Fastly ã«å…¥ç¤¾ã—ã¾ã—ãŸ
Summary in English: Joined Fastly, will continue my work on H2O there as an open-source developer. 2017å¹´1æœˆ1æ—¥ä»˜ã§ã€Fastly ç¤¾ã¸è»¢è·ã—ãŸã®ã§å ±å‘Šã„ãŸã—ã¾ã™ã€‚ éŽåŽ»ï¼•å¹´é–“ã€DeNA ã§ã¯ R&D çš„ãªç«‹å ´ã‹ã‚‰ã€æ§˜ã€…ãªåŸºç›¤çš„ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼ˆã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã«ãªã£ãŸã‚‚ã®ã‚‚ã‚ã‚Šã¾ã™ã—ã€ã‚¯ãƒãƒ¼ã‚ºãƒ‰ãªã‚‚ã®ã‚‚ã‚ã‚Šã¾ã™ï¼‰ã®é–‹ç™ºã«æºã‚ã£ã¦ãã¾ã—ãŸã€‚ æœ€è¿‘ï¼’å¹´é–“ã¯ã€åŒç¤¾ã®ã‚²ãƒ¼ãƒ ç”¨ã‚µãƒ¼ãƒã«ç«¯ã‚’ç™ºã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã® HTTP/2 ã‚µãƒ¼ãƒã€ŒH2Oã€ã®é–‹ç™ºã«å¾“äº‹ã—ã¦ãã¾ã—ãŸãŒã€ãã®å®Ÿè£…å“è³ªãŒé«˜ãè©•ä¾¡ã•ã‚Œã€ä¸–ç•Œæœ‰æ•°ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„é…ä¿¡ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ï¼ˆCDNï¼‰ã§ã‚ã‚‹ Fastly ã§æŽ¡ç”¨ã•ã‚ŒãŸä»–ã€å¤§è¦æ¨¡ãªã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹äº‹æ¥è€…ã§æŽ¡ç”¨ã«ã‚€ã‘ãŸå‹•ããŒé€²ã‚€ãªã©ã®æˆæžœãŒå‡ºã¤ã¤ã‚ã‚Šã¾ã™ã€‚ ã¾ãŸã€H2O ã«ãŠã‘ã‚‹å®Ÿè£…çµŒé¨“ã‚’ã‚‚ã¨ã«ã€H
mapk0y 2017/01/12
h2o
ãƒªãƒ³ã‚¯
mrubyã§yamlã‚’èªã¿ã“ã‚“ã§h2oãŒè¿”ã™ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
mapk0y 2016/12/20
mruby

h2o

docker
ãƒªãƒ³ã‚¯
Re: http://qiita.com/yu_suke1994/items/a253987f797db728632f
mapk0y 2016/12/20
haconiwa

h2o
ãƒªãƒ³ã‚¯
Docker: h2o ã¨ php-fpm ã‚’é€£æºã•ã›ã‚‹
docker-compose.yml ã®å†…å®¹ã¯æ¬¡ã®ã¨ãŠã‚Šã€‚ data: image: debian:jessie volumes: - ./www:/usr/share/h2o/html tty: true php: image: php:7.0-fpm expose: - 9000 volumes_from: - data h2o: build: h2o ports: - 80:80 volumes_from: - data links: - php h2o/Dockerfile ã¯æ¬¡ã®ã¨ãŠã‚Šã€‚ FROM debian:jessie RUN mkdir -p /usr/share/h2o/html RUN apt-get update && apt-get install -y ca-certificates \ git build-essential cmake openssl lib
mapk0y 2016/09/26
docker

h2o
ãƒªãƒ³ã‚¯
HTTPSã®Webã‚µãƒ¼ãƒã‚’è¨å®šã—ãŸ (h2o + Let's Encrypt) - ã¯ã“ã¹ã«ã£ã â™¨
æœ€è¿‘ã€ãƒã‚¤ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãƒ–ãƒ©ã‚¦ã‚¶ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚’èªã‚“ã§ã„ã¦ã€HTTPSã«ã¤ã„ã¦ã¡ã‚‡ã£ã¨å‹‰å¼·ã—ã¦ã„ã¾ã™ã€‚å‹‰å¼·ã«ã‚ãŸã£ã¦ã¯ã€å®Ÿéš›ã«è©¦ã›ã‚‹å ´æ‰€ãŒã‚ã£ãŸã‚‰ä¾¿åˆ©ãã†ãªã®ã§ã€è‡ªåˆ†ã®ã•ãã‚‰VPSã«HTTPSã®Webã‚µãƒ¼ãƒã‚’è¨ç½®ã—ã¦ã¿ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ã“ã®æ¬¡ã¯HTTP2ã®å®Ÿé¨“ã‚‚ã—ãŸã„ã®ã§ã€å…ˆé€²çš„ãªHTTP2ã®æ©Ÿèƒ½ãŒå®Ÿè£…ã•ã‚Œã¦ã„ãã†ãªh2oã‚’ä½¿ã£ã¦ã¿ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ ç’°å¢ƒ ä»Šå›žã®ä½œæ¥ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªç’°å¢ƒã§ã‚„ã‚Šã¾ã—ãŸã€‚ $ uname -a Linux douzemille 4.4.0-36-generic #55-Ubuntu SMP Thu Aug 11 18:01:55 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux $ cat /etc/lsb-release DISTRIB_ID=Ubuntu DISTRIB_RELEASE=16.04 DISTRIB_CODENA
mapk0y 2016/09/25
h2o

LetsEncrypt
ãƒªãƒ³ã‚¯
H2O HTTP2 server 2.0 released!
We are happy to announce the release of H2O version 2.0. It is a major update from 1.7 series, including many improvements and bug fixes. The most prominent changes are:support for Brotli compression directives for file-level resource mapping addition of the status handler reverse proxying using HTTPS Full list of changes can be found here. Please refer to the reference documentation to find out h
mapk0y 2016/06/01
http2

h2o
ãƒªãƒ³ã‚¯
H2O HTTP/2 server goes 2.0 adding support for Brotli
Today, I am happy to announce the release of H2O version 2.0.0-beta1, the first release of the 2.0 series. In the release, we have added support for Brotli in two ways. For those who do not know, Brotli is a new compression method developed by Google. It is said to compress files ~20% smaller than gzip - means less bandwidth consumed and faster rendering on the client side. Mozilla has already add
mapk0y 2016/03/20
h2o

brotli
ãƒªãƒ³ã‚¯
File-level mapping introduced in H2O version 2.0
As the developer of H2O, the lack of ability to define a mapping for a specific path (not a directory) has been one of the complaints I hear the most. Finally, we have a fix for the issue, and that is why the next release will be given the number 2.0. Starting from H2O version 2.0.0beta-1, it is possible to write a configuration like the following. The example maps all requests to a FastCGI server
mapk0y 2016/03/20
h2o
ãƒªãƒ³ã‚¯
ãƒ¬ã‚¤ãƒ†ãƒ³ã‚·ã«è² ã‘ãªã„ãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã—ã¦ç™»å ´ã—ãŸHTTP/2ï½žå¥¥ä¸€ç©‚æ°ã«ã‚ˆã‚‹ã€ŒHTTPã¨ã‚µãƒ¼ãƒæŠ€è¡“ã®æœ€æ–°å‹•å‘ã€ï¼ˆå‰ç·¨ï¼‰ã€‚Developers Summit 2016
ç§ã¯Webé–¢é€£ã®åŸºç›¤æŠ€è¡“ã‚’20å¹´ãã‚‰ã„ã‚„ã£ã¦ã„ã¾ã™ã€‚ æœ€è¿‘ã®ä»•äº‹ã¨ã—ã¦ã¯ãƒ‡ã‚£ãƒ¼ãƒ»ã‚¨ãƒŒãƒ»ã‚¨ãƒ¼ã§ã€ŒH2Oã€ã¨ã„ã†Webã‚µãƒ¼ãƒã‚’é–‹ç™ºã—ã¦ã„ã¦ã€2016å¹´2æœˆã«1.7.0ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚HTTP/2å¯¾å¿œã®Webã‚µãƒ¼ãƒã¨ã—ã¦ã¯ãŠãã‚‰ãä¸–ç•Œæœ€é€Ÿã§æ´—ç·´ã•ã‚ŒãŸå®Ÿè£…ã ã‚ã†ã¨ã„ã†è©•ä¾¡ã‚’ã„ãŸã ã„ã¦ã„ã¾ã™ã€‚ æœ¬æ—¥ã¯ã‚µãƒ¼ãƒæŠ€è¡“ã‚’ãã‚‚ãã‚‚ã©ã†ã„ã†è©•ä¾¡è»¸ã§ã‚ã‚Œã‚ã‚ŒãŒè¦‹ã¦ã„ã‚‹ã®ã‹ã€HTTP/2ã®ç‰¹é•·ã€‚ãã—ã¦ã‚µãƒ¼ãƒãƒ—ãƒƒã‚·ãƒ¥ã¨ã¯ãªã«ã‹ã€HTTPSåŒ–ã¯ã©ã‚Œã ã‘ã‚µãƒ¼ãƒè² è·ãŒä¸ŠãŒã‚‹ã®ã‹ã«ã¤ã„ã¦ã®ã‚ã‚Œã‚ã‚Œã®è¦‹è§£ã€‚Webã‚µãƒ¼ãƒå†…ã§ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆå®Ÿè¡ŒãŒã©ã†å¤‰ã‚ã£ã¦ãã¦ã„ã‚‹ã®ã‹ã€ã¨ã„ã£ãŸè©±ã‚’ã—ã¦ã„ãã¾ã™ã€‚ ã‚µãƒ¼ãƒæŠ€è¡“ã®è©•ä¾¡è»¸ ã‚µãƒ¼ãƒæŠ€è¡“ã®è©•ä¾¡è»¸ã‚’ã©ã†è€ƒãˆã¦ã„ã‚‹ã‹ã§ã™ãŒã€å¤§ããåˆ†ã‘ã¦4ã¤ã®é …ç›®ã§è€ƒãˆã¦ã„ã¾ã™ã€‚ ã‚µãƒ¼ãƒè² è· è»¢é€ãƒ‡ãƒ¼ã‚¿é‡ å¿œç”æ€§ è¨å®šãƒ»é‹ç”¨ã‚³ã‚¹ãƒˆ ã¾ãšã€Œã‚µãƒ¼ãƒè² è·ã€ã§ã™ã€‚å°è¦æ¨¡ãªWebã‚µã‚¤ãƒˆã§ã¯ã‚µãƒ¼ãƒè² è·ã¯ãã‚Œã»ã©å•é¡Œã«ã¯ãª
mapk0y 2016/03/04
network

http2

h2o
ãƒªãƒ³ã‚¯
Using H2O with Let's Encrypt
Let's Encrypt is a new certificate authority that is going to issue certificates for free using automated validation process. They have announced that they will enter public beta on Dec. 3rd 2015. This bl ogpost explains how to setup a H2O using the automated process. Step 1. Install the client % git clone https://github.com/letsencrypt/letsencrypt.git Step 2. Obtain the certificate If you already
mapk0y 2015/12/02
H2O

LetsEncrypt
ãƒªãƒ³ã‚¯
CentOSã§ã‚‚h2oã§OCSP Staplingã—ãŸã„ - ï¼ˆã²ï¼‰ãƒ¡ãƒ¢
h2o/1.5.2ã§ã™ã€‚ ï¼ˆãŸã„ã¦ã„ãã†ã ã¨æ€ã„ã¾ã™ãŒï¼‰ä¸é–“CAã‹ã‚‰ç™ºè¡Œã•ã‚ŒãŸã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®å ´åˆã¯ã€h2oã§ã¯certificate-fileã§æŒ‡å®šã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã®å†…å®¹ã‚’ ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ ä¸é–“CAã®è¨¼æ˜Žæ›¸ ã¨ã„ã†é †åºã§catã§çµåˆã—ãŸã‚‚ã®ã«ã—ã¾ã™ã€‚é †åºãŒã‚ã‚‹ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„ã€‚å‚è€ƒï¼š ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ç‰ã€æºå¸¯ç«¯æœ«ã®ä¸€éƒ¨ã®ã¿ã€Œè¨¼æ˜Žæ›¸ãŒä¿¡é ¼ã§ããªã„ã€ã¨è¦å‘ŠãŒè¡¨ç¤ºã•ã‚Œã¾ã™ | Symantec ã•ã¦ã€h2oã¯èµ·å‹•æ™‚ã«OCSPãƒ¬ã‚¹ãƒãƒ³ãƒ€ã‹ã‚‰ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’å¾—ã¦ã€ãã‚Œã®verifyãŒæˆåŠŸã™ã‚Œã°OCSP Staplingã‚’æœ‰åŠ¹ã«ã—ã¾ã™ã€‚ å…·ä½“çš„ã«ã¯ã€share/h2o/fetch-ocsp-response ã®ä¸ã§opensslã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã£ã¦ã“ã®æ§˜ã«ã—ã¦ã„ã¾ã™ã€‚ # certificate-fileã§æŒ‡å®šã•ã‚ŒãŸã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‹ã‚‰OCSPãƒ¬ã‚¹ãƒãƒ³ãƒ€ã®URIã‚’å¾—ã‚‹ openssl x509 -in $cer
mapk0y 2015/10/28
openssl

h2o
ãƒªãƒ³ã‚¯
H2Oã¨mrubyã‚’ä½¿ã£ã¦IPã‚¢ãƒ‰ãƒ¬ã‚¹ãƒ™ãƒ¼ã‚¹ã§ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã—ã¤ã¤ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã¨ã—ã¦ä½¿ã£ã¦Webã‚µã‚¤ãƒˆã‚’HTTP/2åŒ–ã—ã‚ˆã† - äººé–“ã¨ã‚¦ã‚§ãƒ–ã®æœªæ¥
å¼Šç¤¾ã‚¤ãƒ³ãƒ•ãƒ©ãƒãƒ¼ãƒ ãŒä½¿ã£ã¦ã„ã‚‹muninã‚’h2oã®HTTP/2ã§é«˜é€ŸåŒ–ã—ã¦ã€è«¸ã€…ã®åˆ¶å¾¡ã¯mrubyã§ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ã—ãŸã€‚ãƒãƒ¼ãƒ ã‹ã‚‰ã€Œã¯ã‚„ãƒ¼ã„ï¼ã€ã€Œã‚¹ã‚¯ãƒãƒ¼ãƒ«ã§å‹ã¦ãªã„ï¼ã€ã€Œã“ã‚“ãªæ—©ã„è¡¨ç¤ºæœ€è¿‘ã¿ãŸã“ã¨ãªã‹ã£ãŸã§ã™ã‚ˆï¼ã€ã¨å–œã³ã®å£°ãŒå¤šæ•°å±Šã„ã¦ãŠã‚Šã¾ã™ã€‚â€” MATSUMOTO, Ryosuke (@matsumotory) 2015, 7æœˆ 30 h2oã‚’ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã§ä½¿ãˆã°ã€http://ã§ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯HTTP/1.xã§ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’è¿”ã—ã¤ã¤ã€https://ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã«ã¤ã„ã¦ã¯HTTP/2ï¼‹TLSã«å¯¾å¿œã—ãŸãƒ–ãƒ©ã‚¦ã‚¶ã§ã‚ã‚Œã°HTTP/2ã€å¯¾å¿œã—ã¦ã„ãªã‘ã‚Œã°HTTP/1.xã§ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’è¿”ã™äº‹ãŒã§ãã¾ã™ã€‚ ã¾ãŸã€h2oãŒmrubyã«ã‚ˆã‚‹æ©Ÿèƒ½æ‹¡å¼µã‚’ã‚µãƒãƒ¼ãƒˆã—ã€ã‹ã¤ã€å…ˆæ—¥ã‚¢ã‚¯ã‚»ã‚¹å…ƒIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’mrubyå†…ã§å‚ç…§ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã§ã€IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ç”¨ã„ãŸã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚‚h2o+mrub
mapk0y 2015/08/01
h2o

mruby
ãƒªãƒ³ã‚¯
å‰æ–¹ç§˜åŒ¿æ€§ (forward secrecy) ã‚’ã‚‚ã¤ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®æ£ã—ã„è¨å®šæ–¹æ³•
å‰æ–¹ç§˜åŒ¿æ€§ï¼ˆforward secrecyï¼‰ã¨ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãªæ€§è³ªã‚’æŒ‡ã—ã¾ã™ã€‚ å…¬é–‹éµæš—å·ã®ç§˜å¯†éµã®ã‚ˆã†ã«ã€æ¯”è¼ƒçš„é•·æœŸã«æ¸¡ã£ã¦ä½¿ã‚ã‚Œã‚‹éµãŒæ¼ãˆã„ã—ãŸã¨ãã§ã‚‚ã€ãã‚Œã¾ã§é€šä¿¡ã—ã¦ã„ãŸæš—å·æ–‡ãŒè§£èªã•ã‚Œãªã„ã¨ã„ã†æ€§è³ª éµãŒæ¼ã‚Œã‚‹ã“ã¨ã‚‚æƒ³å®šã›ã‚ˆâ€•â€•ã‚¯ãƒ©ã‚¦ãƒ‰æ™‚ä»£ã«ãŠã‘ã‚‹ã€Œæ¥•å††æ›²ç·šæš—å·ã€ã®å¿…ç„¶æ€§ - @IT éµãŒæ”»æ’ƒè€…ã‚„è«œå ±æ©Ÿé–¢ãªã©ç¬¬ä¸‰è€…ã®çŸ¥ã‚‹ã¨ã“ã‚ã¨ãªã£ãŸå ´åˆã§ã‚‚ã€ãã‚Œã¾ã§é€šä¿¡ã—ã¦ã„ãŸæš—å·æ–‡ãŒè§£èªã•ã‚Œãªã„ã‚ˆã†ã«ã—ãªã„ã¨ã„ã‘ãªã„ã€ã¨ã„ã†è€ƒãˆæ–¹ã¨ã¨ã‚‚ã«ã€æœ€è¿‘ HTTPS ã‚’åˆ©ç”¨ã™ã‚‹ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã«ãŠã„ã¦ã‚‚å°Žå…¥ãŒæ±‚ã‚ã‚‰ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ããŸæ¦‚å¿µã§ã™ã€‚ å‰æ–¹ç§˜åŒ¿æ€§ã‚’æº€ãŸã™ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®è¨å®šæ–¹æ³•ã«ã¤ã„ã¦ã¯ã€TLSã®æš—å·åŒ–æ–¹å¼ã‚’ECDH_RSAã‚ã‚‹ã„ã¯ECDHE_RSAã«è¨å®šã™ã‚Œã°è‰¯ã„ã€ã¨è¿°ã¹ã¦ã„ã‚‹æ–‡çŒ®ãŒå¤šã„ã§ã™ã€‚ ã§ã™ãŒã€ã»ã¨ã‚“ã©ã®ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã«ãŠã„ã¦ã€ãã‚Œã¯èª¤ã‚Šã§ã™ã€‚ ãªãœã‹ã€‚ é€šä¿¡ã‚’æš—å·åŒ–ã™ã‚‹éµï¼ˆã‚»ãƒƒã‚·ãƒ§ãƒ³éµï¼‰
mapk0y 2015/07/23
h2o

security
ãƒªãƒ³ã‚¯
H2Oã®mrubyæ‹¡å¼µãŒå®Ÿç”¨çš„ã«ãªã£ã¦ããŸä»¶ - äººé–“ã¨ã‚¦ã‚§ãƒ–ã®æœªæ¥
H2Oã«mrubyæ‹¡å¼µã®ææ¡ˆã‚’è¡Œã„mergeã•ã‚Œã¦ã‹ã‚‰å¹¾ã¤ã‹ã®PRã‚’çµŒã¦ã€å°‘ã—ãšã¤å®Ÿç”¨çš„ã«ãªã£ã¦ãã¾ã—ãŸã€‚ github.com ä»Šæ—¥ã¯ç°¡å˜ã«ãã®ä½¿ã„æ–¹ã‚’ç´¹ä»‹ã—ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ h2o_mrubyã‚’æœ‰åŠ¹åŒ–ã—ãŸh2oã‚’ãƒ“ãƒ«ãƒ‰ h2o_mrubyã‚’æœ‰åŠ¹åŒ–ã—ã¦ãƒ“ãƒ«ãƒ‰ã™ã‚‹ã®ã¯ç°¡å˜ã§ã€OSã®ãƒ©ã‚¤ãƒ–ãƒ©ãƒªç’°å¢ƒï¼ˆ/usr/lib/ä»¥ä¸‹ã¨ã‹ï¼‰ã«libmruby.aç‰ã®mrubyãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒã‚ã‚‹çŠ¶æ…‹ã§ã€ cmake -DWITH_MRUBY=ON . make h2o ã™ã‚‹ã ã‘ã§ã€h2o_mrubyãŒæœ‰åŠ¹åŒ–ã•ã‚ŒãŸh2oãƒã‚¤ãƒŠãƒªãŒã‚«ãƒ¬ãƒ³ãƒˆã«ãƒ“ãƒ«ãƒ‰ã•ã‚Œã¾ã™ã€‚ç°¡å˜ã§ã™ãã€‚ ã¾ãŸã“ã®è¨˜äº‹ã‚‚å‚è€ƒã«ã™ã‚‹ã¨è‰¯ã„ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ qiita.com ä½¿ãˆã‚‹ãƒ¡ã‚½ãƒƒãƒ‰ mod_mrubyã‚„ngx_mrubyç¨‹ãƒ¡ã‚½ãƒƒãƒ‰ã¯ã¾ã å……å®Ÿã—ã¦ã„ã¾ã›ã‚“ãŒã€å°‘ã—ãšã¤ä½¿ãˆã‚‹ã‚‚ã®ã‚’å®Ÿè£…ã—ã¦ã„ã¾ã™ã€‚ã¾ãŸã€mod_mrubyã‚„ngx_mrubyã¨ã®äº’æ›
mapk0y 2015/07/22
mruby

h2o
ãƒªãƒ³ã‚¯
h2o_mrubyã§ã‚ªãƒ¬ã‚ªãƒ¬mrubyã‚’ä½¿ã†ã«ã¯ - Qiita
2015/9/18 è¿½è¨˜ ä»¥ä¸‹ã®æ–¹æ³•ã¯h2oãŒmrubyã‚’ãƒãƒ³ãƒ‰ãƒ«ã™ã‚‹ã‚ˆã†ã«ãªã£ã¦ä½¿ãˆã¾ã›ã‚“ã€‚ ä»£ã‚ã‚Šã«pure ruby(mruby)ã®ã¿ã®mrbgemsãªã‚‰depsé…ä¸‹ã«ç½®ãã ã‘ã§Okã§ã™ã€‚ libmruby.pcãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½œã‚‹ ä¾‹ãˆã°ã€mruby-mrmagickçµ„ã¿è¾¼ã‚“ã mrubyã‚’ä½¿ã„ãŸã„å ´åˆã€‚ äºˆã‚ã€mruby-mrmagickã‚’çµ„ã¿è¾¼ã‚“ã mrubyã‚’ç”¨æ„ã—ã¦ãŠãã¾ã™ã€‚ ãã®å¾Œã€ä»¥ä¸‹ã®ä½œæ¥ã§h2oã«ãã®mrubyã‚’çµ„ã¿è¾¼ã‚ã¾ã™ã€‚ ä»¥ä¸‹ã®.pcãƒ•ã‚¡ã‚¤ãƒ«ã‚’ç”¨æ„ã™ã‚‹ prefix=/Users/kjunichi/local/src/mruby exec_prefix=${prefix} libdir=${exec_prefix}/build/host/lib/ includedir=${prefix}/include Name: MRUBY-libmruby Description:
mapk0y 2015/07/03
mruby

h2o
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸