Search a title or topic

Over 20 million podcasts, powered by 

Player FM logo
Artwork

Content provided by Gerhard Lazu. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Gerhard Lazu or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Player FM - Podcast App
Go offline with the Player FM app!

I LOVE TLS

1:03:08
 
Share
 

Manage episode 502784237 series 3556081
Content provided by Gerhard Lazu. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Gerhard Lazu or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

In the world of web infrastructure, what starts as a simple goal can often lead you down a fascinating rabbit hole of history, philosophy, and clever engineering. This is the story of our journey to build a simple, single-purpose, open-source CDN for changelog.com and the one major hurdle that stood in our way: Varnish, our HTTP caching layer of choice, doesn't support TLS backends.

Enter Nabeel Sulieman, a shipit.show guest, who had previously introduced us to KCert, a simpler alternative to cert-manager. We knew if anyone could help us solve this TLS conundrum, it was him. After a couple of false starts, we finally recorded the final solution. As Nabeel aptly put it: Third time is the charm.

🍿 This entire conversation is available to Make it Work members as full videos served from the CDN, and also a Jellyfin media server: makeitwork.tv/i-love-tls πŸ‘ˆ Scroll to the bottom of the page for CDN & media server info

LINKS

EPISODE CHAPTERS

  • (00:00) - How this started
  • (02:05) - What makes TLS & SSL interesting for you?
  • (05:58) - Disabling issues & pull requests
  • (08:19) - What is Pipely?
  • (14:03) - Why no SSL? (in Varnish)
  • (15:36) - Who is Poul-Henning Kamp?
  • (17:30) - The Bikeshed
  • (19:46) - Pipely pull request #8
  • (23:56) - Dagger instead of Docker
  • (29:41) - pipely Dagger module
  • (36:52) - What is saswqatch?
  • (40:44) - ghcr.io/gerhard/sysadmin
  • (43:45) - Let's benchmark!
  • (51:52) - What happens next?
  • (01:00:17) - Wrap-up
  continue reading

15 episodes

Artwork

I LOVE TLS

Make it Work

published

iconShare
 
Manage episode 502784237 series 3556081
Content provided by Gerhard Lazu. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Gerhard Lazu or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

In the world of web infrastructure, what starts as a simple goal can often lead you down a fascinating rabbit hole of history, philosophy, and clever engineering. This is the story of our journey to build a simple, single-purpose, open-source CDN for changelog.com and the one major hurdle that stood in our way: Varnish, our HTTP caching layer of choice, doesn't support TLS backends.

Enter Nabeel Sulieman, a shipit.show guest, who had previously introduced us to KCert, a simpler alternative to cert-manager. We knew if anyone could help us solve this TLS conundrum, it was him. After a couple of false starts, we finally recorded the final solution. As Nabeel aptly put it: Third time is the charm.

🍿 This entire conversation is available to Make it Work members as full videos served from the CDN, and also a Jellyfin media server: makeitwork.tv/i-love-tls πŸ‘ˆ Scroll to the bottom of the page for CDN & media server info

LINKS

EPISODE CHAPTERS

  • (00:00) - How this started
  • (02:05) - What makes TLS & SSL interesting for you?
  • (05:58) - Disabling issues & pull requests
  • (08:19) - What is Pipely?
  • (14:03) - Why no SSL? (in Varnish)
  • (15:36) - Who is Poul-Henning Kamp?
  • (17:30) - The Bikeshed
  • (19:46) - Pipely pull request #8
  • (23:56) - Dagger instead of Docker
  • (29:41) - pipely Dagger module
  • (36:52) - What is saswqatch?
  • (40:44) - ghcr.io/gerhard/sysadmin
  • (43:45) - Let's benchmark!
  • (51:52) - What happens next?
  • (01:00:17) - Wrap-up
  continue reading

15 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright
Listen to this show while you explore
Play