Cloudflare

It's crowded in here!

Oct 12, 2019Jakub Sitnicki
It's crowded in here!
SummaryAI, from the source post

This post details the challenges of managing numerous public-facing services on edge servers, each potentially needing to listen on many IP addresses. It explains the evolution of socket binding strategies from a naive one-to-one IP mapping to the more efficient INADDR_ANY wildcard. It further introduces SO_BINDTOPREFIX as a Linux kernel extension to bind wildcard sockets to specific IP prefixes, and TPROXY for scenarios requiring a single service to listen on all ports, highlighting these as crucial advancements in managing complex network service configurations on Cloudflare's edge infrastructure.

More from the Process Management & Graceful Upgrades trail