OWOWASP · Open source
Community homeHot discussions Latest posts Best of Knowledge base Resources About

OWASP · Open source · Help: owasp-opensource fails to start intermittently in containers, logs inside

6
OWr/owasp-opensource·posted by bob_chen·6 hours agoInternals

Help: owasp-opensource fails to start intermittently in containers, logs inside

Short version: owasp-opensource needs almost no tuning at small and medium scale — the point where it starts to hurt is much further out than most people assume. Full measurements below.

The first thing was to collapse the variables. We were changing config and upgrading the version at the same time, and afterwards nobody could say which change caused what. We rolled back to moving one variable at a time, re-ran three times, and only then did the curve settle. Tedious, but not skippable.

Image placeholder · object storage in production
POST /api/uploads → CDN origin pull
1 comments

1 comments

M
Ttang_hao·just now

I see point 3 differently. The trade-off depends on your read/write ratio: read-heavy with little writing means caching actually widens the inconsistency window.

314

This is the post detail page /en/c/owasp-opensource/post/p10. Posts and comments are generated deterministically from a seeded PRNG, so the same post always renders the same content and the link can be shared, reloaded and indexed. In production this page reads MySQL for the post, Redis for hot-post caching, and fetches the whole comment tree in a single query on the path column.

See the database schema →