OpenResty Official Blog

Flame Graphs: How to Read a CPU Flame Graph and Find the Code Burning Your CPU

2026-08-27T00:00:00.000Z

What is a flame graph: definition, axes, and the four rules
How to read a flame graph: plateaus, towers, hair, and self vs total
Three real production flame graphs: PHP preg_match, Go regexp.MustCompile, Erlang erts_pcre_exec
From 100% CPU to the culprit line: a four-step workflow with a per-stack routing table
How to get a flame graph for your stack
Icicle graphs, flame charts, and other variants
Can AI read flame graphs for you?

P99 Latency: Why Averages Lie, and How to Diagnose the Slowest 1%

2026-08-27T00:00:00.000Z

What is P99 latency?
P50 vs P95 vs P99: what each percentile tells you
Why average latency lies
Why is P99 latency high? A root-cause spectrum
How to diagnose high P99 latency
How to reduce P99 latency: fix what you found
Summary
Frequently Asked Questions

Memory Leak Detection in Production: From RSS Curve to Source Line

2026-08-18T00:00:00.000Z

The Symptom: A Memory Curve That Only Goes Up
Memory Leak or Just High Memory Usage?
Four Leak Patterns with Real Root-Cause Chains
It Looks Like a Leak, but It Isn’t
How to Locate a Leak: Top-Down Layered Attribution
Why Traditional Tools Fall Short in Production
Frequently Asked Questions

Off-CPU Analysis: Four Root Causes Behind Low CPU Yet High Latency

2026-08-14T00:00:00.000Z

What Is Off-CPU Time?
The Symptom: CPU Usage Won’t Climb, Yet Requests Are Queuing
Four Categories of Off-CPU Root Causes with Real-World Root-Cause Chains
How to Quantify Off-CPU Time
On-CPU + Off-CPU = Wall-Clock Time: The Bigger Picture and the Tool Ecosystem
FAQ

CDN for Live Streaming: Surviving Peak Events Without Peak-Event Bills

2026-07-20T00:00:00.000Z

Why live streams crash at peak: running day-to-day doesn’t mean surviving the peak
How a private CDN turns peak stability from probability into certainty
Live streaming CDN cost comparison: surviving the peak isn’t paying for the peak
The real cost of a private CDN: not the same as building from scratch
Beyond delivery: what a live streaming scenario needs from the same gateway layer
FAQ

OpenResty XRay Version 26.7.15. Now Available

2026-07-15T00:00:00.000Z

Key Highlights
Other Important Updates

OpenResty XRay AI Assistant: Making Every Piece of Analysis Data Speak

2026-07-14T00:00:00.000Z

How Is It Different from Pasting a Report into ChatGPT?
Three Typical Scenarios
FAQ: Can AI Really Read a Flame Graph? How Reliable Is It?

Building a Self-Hosted Live Streaming CDN for HLS with OpenResty Edge

2026-07-08T00:00:00.000Z

Why live HLS breaks a naive caching setup
Building it on OpenResty Edge: two page rules with opposite TTLs
The most critical step: the Use stale proxy cache action
A shield tier with gateway partitions: collapsing to one fetch network-wide
Verifying the configuration and load testing
FAQ

OpenResty Private Libraries: High-Performance Lua & Nginx Modules

2026-07-08T00:00:00.000Z

The Full Catalog
What’s Inside, by Scenario
How Licensing Works
FAQ

OpenResty Tutorial: 7-Step Hands-On Guide from Hello World to Production

2026-07-03T00:00:00.000Z

This OpenResty tutorial series takes you from a fresh Linux server to a working Nginx + Lua application in seven hands-on steps — no prior Lua experience required.

Install OpenResty - Complete Setup Guide for All Platforms

2026-06-30T00:00:00.000Z

Supported Platforms
Quick Start (Ubuntu / Debian)
Platform Installation Guides
ARM64 / Aarch64
Alpine Linux
macOS & Building from Source
Verify Your Installation
FAQ

OpenResty 1.31.1.1 Released

2026-06-05T00:00:00.000Z

Version highlights
Full Changelog
Feedback

OpenResty 1.29.2.5 Released

2026-05-25T00:00:00.000Z

Version highlights
Full Changelog
Feedback

OpenResty 1.29.2.4 released

2026-05-20T00:00:00.000Z

Version highlights
Full Change logs

Do You Need a Service Mesh? When a Centralized Gateway Is Enough

2026-05-18T00:00:00.000Z

Do you need a service mesh? When a centralized gateway is the better fit
Four pain points of ungoverned east-west traffic
Service Mesh vs. centralized gateway: engineering trade-offs
Full lifecycle walkthrough: permissions → canary → rollback
Three-stage rollout path, real-world results, and FAQ

OpenResty XRay Version 26.5.11. Now Available

2026-05-12T00:00:00.000Z

Key Highlights
Other Important Updates

OpenResty Edge Version 26.6.8 Now Available

2026-05-08T00:00:00.000Z

Core Highlights
Enhanced Features & Increased Flexibility
Improved Usability & Observability
Key Fixes and Stability Enhancements
How to Upgrade?

XDP DDoS Mitigation in Production: Million-PPS Kernel-Native Defense, Built into OpenResty Edge

2026-05-07T00:00:00.000Z

The impossible triangle of DDoS mitigation architectures
How OpenResty Edge delivers XDP DDoS mitigation for all three goals
Measured performance: 170k–180k PPS on an AWS t3.small, million-PPS in the lab
Automated DDoS response as a prerequisite, not a perk
Observability: real-time DDoS mitigation metrics
FAQ: XDP DDoS mitigation

OpenResty Edge Database Backup and Failover: Why Replication Is Not a Backup

2026-05-06T00:00:00.000Z

First line of defense: scheduled database backups and off-host sync
Second line of defense: does streaming replication protect against accidental deletion?
Third line of defense: automatic database failover cluster
Backup vs. replication vs. failover: which do you need?
Frequently asked questions

Kubernetes Gateway Lifecycle Management: Auto-Approve Nodes & Unify Multi-Cluster Control with OpenResty Edge

2026-04-23T00:00:00.000Z

Why traditional gateway management breaks in Kubernetes
How to automate Kubernetes gateway node onboarding and approval
Managing multiple Kubernetes clusters from a single control plane
Two-tier upstreams: mapping Kubernetes upstream ownership to teams
Summary: choosing a gateway for Kubernetes

OpenResty Edge Configuration as Code: GitOps-Driven Gateway Management with `edge2yaml`

2026-04-22T00:00:00.000Z

What Is edge2yaml?
When to Use edge2yaml: GitOps, Multi-Environment Sync, and Batch Editing
edge2yaml vs. OpenResty Edge Admin’s Native Configuration Management
Frequently Asked Questions

lua-cjson Too Slow? jit.cjson Speeds Up JSON Encoding in OpenResty 18x

2026-04-17T00:00:00.000Z

Where Exactly Is the Performance Ceiling?
Common Workaround Strategies and Their Limitations
Why Custom Development or Hacking Existing Libraries is a Bad Idea
Seeking a More Direct Breakthrough
Infrastructure-Level Optimization: jit.cjson
Why the Official Solution is the Safer Bet
Minimal Adoption Cost

Minify HTML, CSS & JS Inside Nginx: OpenResty's 120 MB/s Streaming Minifiers

2026-04-07T00:00:00.000Z

When You Can’t Touch the Build Pipeline
Why a Regex Won’t Cut It
Three Approaches That Almost Work
A Streaming FSM for Each Language, Compiled to Native Code
Five-Minute Setup: A Configuration Example
Four Things to Know Before Going Live

OpenResty 1.29.2.3 Released

2026-03-26T00:00:00.000Z

Version highlights
Full Changelog
Feedback

Binary Vulnerability Scanning: Catch Backported Patches, Cut False Positives

2026-03-24T00:00:00.000Z

Why Version-Matching Vulnerability Scanning Fails: Three Compounding Costs
How OpenResty XRay’s Binary Vulnerability Scanning Works: The Evidence-First Model
Case Study: Binary Vulnerability Scanning on Rocky Linux with Dual OpenSSL Versions
From Alert Fatigue to Precision: A Sustainable Vulnerability Scanning Practice

P99 Latency in a D Service Cut 73%: Conservative GC Meets an O(n) Query Under Load

2026-03-17T00:00:00.000Z

Analyzing GC Traps and Business Hotspots in the Flame Graph
Optimization Roadmap: Why Sequence Is More Important Than Action
Conclusion: From Code Logic to Runtime Reality

OpenResty XRay Version 26.2.1. Now Available

2026-03-13T00:00:00.000Z

Key Highlights
Stability and Usability Enhancements

End-to-End Client Real IP Passthrough in OpenResty Edge

2026-03-05T00:00:00.000Z

Use Cases and Topology
IP Passthrough Methods Overview
OpenResty Edge Configuration
Key Variables
Page Rules
Verification

How OpenResty XRay Enables Full-Stack Dynamic Tracing in Production

2026-03-03T00:00:00.000Z

Where Do Existing Dynamic Tracing Frameworks Fall Short in Production?
How Did OpenResty XRay Rethink Dynamic Tracing at the Architecture Level?
What Is a Full-Stack Flame Graph and How Do You Use It to Diagnose Performance Bottlenecks?
How Is OpenResty XRay Expanding Its Observability Coverage Over Time?
Further Reading and Real-World Case Studie

OpenResty 1.29.2.1 Released

2026-03-03T00:00:00.000Z

Version highlights
Full Changelog
Feedback

OpenResty Edge: Private CDN, Universal Gateway & WAF in One Platform

2026-02-24T00:00:00.000Z

What Is OpenResty Edge? Architecture Overview
OpenResty Edge vs. Traditional Stack: 4 Problems Solved
Universal Gateway & Load Balancing: Dynamic Routing for Microservices
Real-World Case Studies: OTA, News, and SaaS Deployments

Introduction to OpenResty XRay

2026-02-10T00:00:00.000Z

Core Philosophy: A Tracing Engine Built for the Unknown
Turning Noise into Signal: How XRay Demystifies Production Issues
Empowering Engineering Teams in Cloud-Native Reality
Built on a Robust, Open Technological Foundatione
Real-World Success Stories

GSLB Explained: How Global Server Load Balancing Works — and Where DNS-Only Scheduling Fails

2026-01-27T00:00:00.000Z

Why Traditional GSLB Tools Fall Short
What an Ideal Global Server Load Balancing System Requires
A Feedback-Driven GSLB Architecture
GSLB Before and After

lua-resty-kafka Blocking Your Nginx Workers? Meet lua-resty-kafka-fast

2026-01-19T00:00:00.000Z

Three Common Anti-Patterns We See in Production
What is lua-resty-kafka-fast
lua-resty-kafka vs lua-resty-kafka-fast
What This Changes at the Architecture Level
FAQ

OpenResty Edge Version 25.12.5-1 Now Available

2026-01-16T00:00:00.000Z

Key Highlights
Key Optimizations
Key Fixes and Stability Enhancements
How to upgrade?

Hunting Down a Silent Memory Leak in OpenResty Without a Reboot

2026-01-13T00:00:00.000Z

A Complete Dissection of a Production Memory Leak
Why Are These Problems Nearly Unsolvable?
A System Transformation
When Performance Issues Go Beyond Just Tools

Nginx Reverse Proxy QPS Dropped 15x: A Missing upstream keepalive and an -O0 Debug Build

2025-12-23T00:00:00.000Z

A 15x Slower Nginx Reverse Proxy — and No Errors in the Logs
Flame Graphs Expose a Connection Storm: The Missing upstream keepalive
The Remaining 10% Gap: Baseline Comparison Points to the Compiler
How an -O0 Debug Build Cost Us 10% of Performance

TLS Session Resumption in Nginx Clusters: Zero-Downtime Key Rotation

2025-12-19T00:00:00.000Z

Why Session Ticket Key Management Is Harder Than It Looks
How lua-resty-tls-session Rotates Session Ticket Keys Without Restarts
Comparing the Three Approaches
Quantifying Latency Reduction and Uptime Gains
FAQ

WAF Benchmark: OpenResty Edge 3.7–10x Faster than ModSecurity (208 Rules)

2025-12-15T00:00:00.000Z

The Benchmark: 208 WAF Rules on One CPU Core
Why Rule Count Doesn’t Have to Hurt WAF Performance
How to Implement a WAF at the Edge: Four Steps
FAQ: WAF performance

Fix LuaJIT RSS Memory Leak in OpenResty: Stop OOM Kills Without Restarts

2025-12-04T00:00:00.000Z

What Is the LuaJIT Pseudo Memory Leak?
Diagnosing the Problem with Real Production Data
Why Standard Fixes Don’t Work
How LuaJIT-plus Fixes This at the Allocator Level
Production Impact After Deployment

OpenResty Edge Webhook: Event-Driven Gateway Notifications That Replace Polling

2025-12-03T00:00:00.000Z

What an OpenResty Edge Webhook Delivers: From Data Deluge to Critical Signals
Why OpenResty Edge Webhook Notifications Are Efficient and Secure
Building a Less is More Event-Driven Operations Ecosystem

How We Pinpointed a 244ms Latency Spike in a 500k QPS OpenResty Gateway

2025-11-18T00:00:00.000Z

Latency Spikes and CPU Waste Hidden Beneath Healthy Averages
Troubleshooting OpenResty Latency Without Code Changes or Restarts
The Results: Latency Spikes Eliminated, 30% Lower CPU Usage
Frequently Asked Questions

Open Source OpenResty vs. OpenResty Edge: Key Differences

2025-11-17T00:00:00.000Z

Open Source vs. OpenResty Edge at a Glance
When Open Source Hits Its Limits: 6 Real Scenarios
Choosing the Right Path for Your Infrastructure

Private CDN Solution: Enterprise Edge Architecture | OpenResty Edge

2025-11-11T00:00:00.000Z

The Breaking Point: When Public CDNs Fail the Enterprise
The CDN Landscape: Public CDN vs. DIY Open Source vs. Commercial Private CDN
From OpEx to CapEx: The Business Case for a Private CDN
Why OpenResty Edge? Evaluating an Enterprise Private CDN Platform
The Edge Is Your Competitive Advantage — Not a Commodity
Frequently Asked Questions

How to Diagnose Java Memory Leaks in Production — Without Heap Dumps or Restarts

2025-11-10T00:00:00.000Z

Why Full GCs Didn’t Reclaim the Heap: A Production Java Memory Leak
How to Diagnose a Java Memory Leak in Production Without a Heap Dump
How to Find a Java Memory Leak: A Reusable 3-Step Method
Why Use OpenResty XRay to Find Java Memory Leaks on a Live JVM?
FAQ

When a "Black Box" Plugin Consumes 45% CPU: How We Pinpointed Lua Line 93 Without Source Code

2025-11-10T00:00:00.000Z

When perf Meets the Black Box
From Sampling to Full-Stack Dynamic Tracing
Uncovering the Evidence Trail
From What happene to Why
Summary

OpenResty Edge Version 25.9.17 Now Available

2025-10-31T00:00:00.000Z

Core Highlights
Enhanced Features & Increased Flexibility
Improved Usability & Observability
Key Fixes and Stability Enhancements
How to Upgrade?

OpenResty XRay Version 25.10.11 Now Available

2025-10-31T00:00:00.000Z

Three Key Highlights
Enhanced Diagnostic Accuracy and Stability
Usability and Security Enhancements

Gzip CPU Usage: Why Compression Level 6 Consumed 54% of Server CPU

2025-10-27T00:00:00.000Z

How Gzip Compression Consumed 54% of CPU in Production
Why Gzip CPU Usage Was So High: A Configuration-Level Diagnosis
Quantifying Gzip and Brotli CPU Overhead
From Guesswork to Data-Driven Compression Tuning

Zstd Compression in OpenResty Edge: Faster, Lighter Than Gzip and Brotli

2025-10-20T00:00:00.000Z

The Evolution of Compression Algorithms
What is Zstandard (zstd)
Why Zstandard is Particularly Well-Suited for OpenResty Edge
How to Enable Zstandard (Zstd) Compression in OpenResty Edge
Zstd vs Brotli vs Gzip: Which Should You Serve?