docker-nginx-http3
Infrastructure
nginx docker image
SHOW HN2019
How HN took it
2 positive, 14 neutral or asking, 2 mixed, 3 critical, out of 21 comments about the project. Thread score -0.08.
Privacy: 0 for, 2 againstExecution: 1 for, 0 againstDocs: 0 for, 1 againstIdea: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for testing HTTP/3 support in libraries
From 1 comment
It's not. But if you work on libraries that transfer http data around, this could be used to help test http/3 support.
proverbialbunny on HN
Brotli support is useful for production-ready nginx images
From 1 comment
This is great, and I'll be using it for development! However, I've been looking for something a bit more predictable, and yet still modern, for production use. I do not know why…
jwr on HN
Objections
Applies third-party patches (Cloudflare nginx patches, quiche) to nginx
From 1 comment
I've played around with the nginx cloudflare patches and quiche, and it all seems to work just fine in my lab setup. I don't like having to apply third party patches to any…
LeonM on HN
0-RTT is insecure and vulnerable to replay attacks
From 2 comments
I think 0-RTT is just bad idea security wise.
anfilt on HNWell, "ssl_early_data" is opt-in. If you enable it on a virtualhost, then you also need to look at the "Early-Data" request header in your backend and make a decision there. e.g.…
regecks on HN
Build not multi-stage and has no layer caching
From 1 comment
I'm just curious, is there a reason not to use a multi-stage docker build here? There are a ton of build steps, and it seems pretty tedious to have to start from scratch every…
mnutt on HN
Experimental nature not clearly flagged for production use
From 1 comment
I would suggest highlighting the experimental nature of the repo, especially if someone reaches it without going through HN. I've read the catchy "All built on the bleeding edge.…
cafxx on HN
Requests
Use multi-stage builds or layer caching
From 2 comments
I'm just curious, is there a reason not to use a multi-stage docker build here? There are a ton of build steps, and it seems pretty tedious to have to start from scratch every…
mnutt on HNMight I suggest you use Skaffold for this task, which can work with regular Docker as well.
techntoke on HN
Move GPG key into a build ARG
From 1 comment
The ARG approach to everything is really good IMO, it let you customize the final image without having to change the Dockerfile. For example, in the OP Dockerfile, the GPG key at…
darkwater on HN
Add benchmarks comparing HTTP/3 with HTTP/2
From 1 comment
Are there any benchmarcks of http3? I would like to see how it compare vs http2 h2 + tcp fast open
The_rationalist on HN
Questions
Is there replay attack protection for 0-RTT?
From 1 comment
How about 0-RTT replay attack protection?
vasilia on HN
Are there benchmarks of HTTP/3 versus HTTP/2?
From 1 comment
Are there any benchmarcks of http3? I would like to see how it compare vs http2 h2 + tcp fast open
The_rationalist on HN
Why is this interesting for non-technical users?
From 1 comment
For non technical users why ia this interesting?
SomeOldThrow on HN
Alternatives named
ricardbejarano/nginx image
From 1 comment
You may find my NGINX image[1] interesting. There's some features you could easily add to yours in order to make it a better overall image. [1]…
ricardbejarano on HN
fholzer/docker-nginx-brotli and githubcdr fork
From 1 comment
I did exactly this 3 days ago, forked from fholzer/docker-nginx-brotli our work looks very much the same See https://github.com/githubcdr/docker-nginx-brotli
zegvold on HN