{"id":105117,"date":"2022-09-16T15:36:39","date_gmt":"2022-09-16T13:36:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/cloudflare-pereshyol-s-nginx-na-sobstvennyj-prokci-pingora-napisannyj-na-yazyke-rust"},"modified":"2022-09-16T15:36:39","modified_gmt":"2022-09-16T13:36:40","slug":"cloudflare-pereshyol-s-nginx-na-sobstvennyj-prokci-pingora-napisannyj-na-yazyke-rust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/cloudflare-pereshyol-s-nginx-na-sobstvennyj-prokci-pingora-napisannyj-na-yazyke-rust","title":{"rendered":"Cloudflare migrou do NGINX para seu pr\u00f3prio proxy Pingora, escrito em Rust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A empresa Cloudflare anunciou a migra\u00e7\u00e3o de sua rede de entrega de conte\u00fado para o uso do proxy Pingora, desenvolvido na linguagem Rust. O novo proxy substituiu a configura\u00e7\u00e3o baseada no servidor NGINX com scripts Lua e processa mais de um trilh\u00e3o de solicita\u00e7\u00f5es por dia. \u00c9 not\u00e1vel que a transi\u00e7\u00e3o para um proxy especializado n\u00e3o apenas possibilitou a implementa\u00e7\u00e3o de novas funcionalidades e aumentou a seguran\u00e7a atrav\u00e9s do manuseio seguro da mem\u00f3ria, mas tamb\u00e9m resultou em um aumento significativo de desempenho e economia de recursos \u2014 a solu\u00e7\u00e3o baseada no Pingora n\u00e3o requer o uso de Lua, consumindo assim 70% menos recursos de CPU e 67% menos mem\u00f3ria ao processar o mesmo volume de tr\u00e1fego. <\/p>\n

Por um longo tempo, o sistema para o proxy de tr\u00e1fego entre usu\u00e1rios e destinat\u00e1rios servidores<\/a> baseado em NGINX e scripts Lua atendia \u00e0s necessidades da Cloudflare, mas com o crescimento da rede e o aumento de sua complexidade, uma solu\u00e7\u00e3o universal se mostrou insuficiente, tanto em termos de desempenho quanto devido a limita\u00e7\u00f5es em escalabilidade e implementa\u00e7\u00e3o de novas funcionalidades para os clientes. Em particular, surgiram dificuldades na adi\u00e7\u00e3o de funcionalidades que v\u00e3o al\u00e9m de um simples gateway e balanceador de carga. Por exemplo, foi necess\u00e1rio, em caso de falha no processamento de requisi\u00e7\u00f5es servidor<\/a> redirecionar a solicita\u00e7\u00e3o para outro servidor, fornecendo um conjunto diferente de cabe\u00e7alhos HTTP. <\/p>\n

Em vez de uma arquitetura com divis\u00e3o de solicita\u00e7\u00f5es entre processos de manipuladores separados (worker), o Pingora aplica um modelo multithread, que em cen\u00e1rios de uso da Cloudflare (alta concentra\u00e7\u00e3o de tr\u00e1fego de diferentes sites com um grande desvio estat\u00edstico) mostrou uma distribui\u00e7\u00e3o de recursos mais eficaz entre os n\u00facleos da CPU. Em particular, a vincula\u00e7\u00e3o de solicita\u00e7\u00f5es n\u00e3o balanceadas a processos no nginx levava \u00e0 carga desbalanceada nos n\u00facleos da CPU, resultando em que requisi\u00e7\u00f5es intensivas em recursos e E\/S bloqueantes atrasavam o processamento de outras requisi\u00e7\u00f5es. Al\u00e9m disso, a vincula\u00e7\u00e3o de pools de conex\u00f5es a processos de manipuladores n\u00e3o permitia reutilizar conex\u00f5es j\u00e1 estabelecidas por outros processos de manipuladores, o que diminui a efici\u00eancia do trabalho com um grande n\u00famero de processos de manipuladores. <\/p>\n

NGINX:

\"Cloudflare<\/center> <\/p>\n

Pingora:

\"Cloudflare<\/center> <\/p>\n

A implementa\u00e7\u00e3o do Pingora permitiu reduzir em 160 vezes o n\u00famero de opera\u00e7\u00f5es de instala\u00e7\u00e3o de novas conex\u00f5es e aumentar a propor\u00e7\u00e3o de requisi\u00e7\u00f5es reutiliz\u00e1veis de 87,1% para 99,92%. Al\u00e9m da redu\u00e7\u00e3o das conex\u00f5es repetidas e do uso mais eficiente dos n\u00facleos da CPU, o aumento da performance do novo proxy foi principalmente impulsionado pela elimina\u00e7\u00e3o dos manipuladores lentos escritos em Lua utilizados com o nginx. <\/p>\n

A linguagem Rust foi escolhida por permitir alta performance junto com ferramentas para assegurar um uso seguro da mem\u00f3ria. \u00c9 mencionado que, apesar da alta qualifica\u00e7\u00e3o dos engenheiros da Cloudflare e da revis\u00e3o do c\u00f3digo escrito em C, n\u00e3o foi poss\u00edvel evitar erros que levam a problemas de mem\u00f3ria (por exemplo, a vulnerabilidade no analisador HTML). Quanto ao novo c\u00f3digo, s\u00e3o mencionados casos de falhas no Pingora que foram causadas n\u00e3o por problemas no aplicativo, mas por um erro no n\u00facleo do Linux e falhas de hardware. <\/p>\n

Adicionalmente, pode-se destacar o coment\u00e1rio feito por Linus Torvalds na confer\u00eancia Open-Source Summit Europe que est\u00e1 acontecendo agora, sobre a inclus\u00e3o do suporte \u00e0 linguagem Rust no n\u00facleo do Linux. No n\u00facleo 6.0, os patches para o desenvolvimento de drivers de dispositivos em Rust n\u00e3o foram inclu\u00eddos, mas segundo Linus, provavelmente ser\u00e3o aceitos no n\u00facleo 6.1, e ele n\u00e3o pretende delayar a integra\u00e7\u00e3o. Como motiva\u00e7\u00e3o para adicionar o suporte ao Rust, al\u00e9m do impacto positivo na seguran\u00e7a, Linus menciona tamb\u00e9m a possibilidade de aumentar o interesse de novos participantes em trabalhar no n\u00facleo, o que \u00e9 relevante dado o envelhecimento dos veteranos.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0435 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 Pingora, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust. \u041d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043d\u0430 \u0431\u0430\u0437\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX \u0441 Lua-\u0441\u043a\u0440\u0438\u043f\u0442\u0430\u043c\u0438, \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0434\u0435\u043d\u044c. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u0441\u0447\u0451\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105118,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105117","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare migrou do NGINX para seu pr\u00f3prio proxy Pingora, escrito na linguagem Rust | ProHoster","description":"A empresa Cloudflare anunciou a transi\u00e7\u00e3o de sua rede de entrega de conte\u00fado para o uso do proxy Pingora, escrito na linguagem Rust.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/cloudflare-pereshyol-s-nginx-na-sobstvennyj-prokci-pingora-napisannyj-na-yazyke-rust","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cloudflare \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u0441 NGINX \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u043ac\u0438 Pingora, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0435 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 Pingora, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/cloudflare-pereshyol-s-nginx-na-sobstvennyj-prokci-pingora-napisannyj-na-yazyke-rust","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-16T13:36:40+00:00","article:modified_time":"2022-09-16T13:36:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105117","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:46:50","updated":"2026-02-19 09:14:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105117","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=105117"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105117\/revisions"}],"predecessor-version":[{"id":161830,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105117\/revisions\/161830"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/105118"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=105117"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=105117"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=105117"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}