Steering connections to sockets with BPF socket lookup hook Jakub Sitnicki, Cloudflare @jkbs0 @cloudflare October 28-29, 2020 Who am I? ● Software Engineer at Cloudflare Spectrum TCP/UDP reverse proxy

accept a list of sockets that are already pre-bound rather than creating its own to allow for socket activation. Support for init systems/other systems that create said activated sockets is not included listen on multiple sockets, including IPv4 and IPv6. Instead of passing in a host/port combination you now provide waitress with a space delineated list, and it will create as many sockets as required. from patch. See: https://github.com/Pylons/waitress/issues/22 Add support for listening on Unix domain sockets. 0.8.3 (2013-04-28) Features Add an asyncore_loop_timeout adjustment value, which controls the

also supported: [server:main] host = 127.0.0.1 port = 8080 The PasteDeploy syntax for UNIX domain sockets is analagous: [server:main] use = egg:waitress#main unix_socket = /path/to/unix.sock You can find unix_socket is not None. Default: '600' sockets A list of sockets. The sockets can be either Internet or UNIX sockets and have to be bound. Internet and UNIX sockets cannot be mixed. If the socket list is remote peer allowed to override various WSGI environment variables using proxy headers. For unix sockets, set this value to localhost instead of an IP address. Default: None trusted_proxy_count How many

accept a list of sockets that are already pre-bound rather than creating its own to allow for socket activation. Support for init systems/other systems that create said activated sockets is not included listen on multiple sockets, including IPv4 and IPv6. Instead of passing in a host/port combination you now provide waitress with a space delineated list, and it will create as many sockets as required. from patch. See: https://github.com/Pylons/waitress/issues/22 Add support for listening on Unix domain sockets. 0.8.3 (2013-04-28) Features Add an asyncore_loop_timeout adjustment value, which controls the

accept a list of sockets that are already pre-bound rather than creating its own to allow for socket activation. Support for init systems/other systems that create said activated sockets is not included listen on multiple sockets, including IPv4 and IPv6. Instead of passing in a host/port combination you now provide waitress with a space delineated list, and it will create as many sockets as required. from patch. See: https://github.com/Pylons/waitress/issues/22 Add support for listening on Unix domain sockets. 0.8.3 (2013-04-28) Features Add an asyncore_loop_timeout adjustment value, which controls the

also supported: [server:main] host = 127.0.0.1 port = 8080 The PasteDeploy syntax for UNIX domain sockets is analagous: [server:main] use = egg:waitress#main unix_socket = /path/to/unix.sock You can find unix_socket is not None. Default: '600' sockets A list of sockets. The sockets can be either Internet or UNIX sockets and have to be bound. Internet and UNIX sockets cannot be mixed. If the socket list is remote peer allowed to override various WSGI environment variables using proxy headers. For unix sockets, set this value to localhost instead of an IP address. Default: None trusted_proxy_count How many

accept a list of sockets that are already pre-bound rather than creating its own to allow for socket activation. Support for init systems/other systems that create said activated sockets is not included listen on multiple sockets, including IPv4 and IPv6. Instead of passing in a host/port combination you now provide waitress with a space delineated list, and it will create as many sockets as required. from patch. See: https://github.com/Pylons/waitress/issues/22 Add support for listening on Unix domain sockets. 0.8.3 (2013-04-28) Features Add an asyncore_loop_timeout adjustment value, which controls the

also supported: [server:main] host = 127.0.0.1 port = 8080 The PasteDeploy syntax for UNIX domain sockets is analagous: [server:main] use = egg:waitress#main unix_socket = /path/to/unix.sock You can find unix_socket is not None. Default: '600' sockets A list of sockets. The sockets can be either Internet or UNIX sockets and have to be bound. Internet and UNIX sockets cannot be mixed. If the socket list is remote peer allowed to override various WSGI environment variables using proxy headers. For unix sockets, set this value to localhost instead of an IP address. Default: None trusted_proxy_count How many

also supported: [server:main] host = 127.0.0.1 port = 8080 The PasteDeploy syntax for UNIX domain sockets is analagous: [server:main] use = egg:waitress#main unix_socket = /path/to/unix.sock You can find unix_socket is not None. Default: '600' sockets A list of sockets. The sockets can be either Internet or UNIX sockets and have to be bound. Internet and UNIX sockets cannot be mixed. If the socket list is remote peer allowed to override various WSGI environment variables using proxy headers. For unix sockets, set this value to localhost instead of an IP address. Default: None trusted_proxy_count How many

1 port = 8080 3 waitress Documentation, Release 3.0.1 The PasteDeploy syntax for UNIX domain sockets is analogous: [server:main] use = egg:waitress#main unix_socket = /path/to/unix.sock You can find unix_socket is not None. Default: '600' sockets A list of sockets. The sockets can be either Internet or UNIX sockets and have to be bound. Internet and UNIX sockets cannot be mixed. If the socket list is remote peer allowed to override various WSGI environment variables using proxy headers. For unix sockets, set this value to localhost instead of an IP address. The value * (wildcard) may be used to signify