Featured Articles

Photo by Yichun Zhang

How a Single "0" Took Down Bilibili — Every Server at 100% CPU, and Reboots Didn't Help

How a Single "0" Took Down Bilibili — Every Server at 100% CPU, and Reboots Didn't Help

Binary Vulnerability Scanning: Catch Backported Patches, Cut False Positives

Binary Vulnerability Scanning: Catch Backported Patches, Cut False Positives

Binary Vulnerability Scanning: Catch Backported Patches, Cut False Positives

Introduction to OpenResty XRay

Introduction to OpenResty XRay

Introduction to OpenResty XRay

Nginx Reverse Proxy QPS Dropped 15x: A Missing upstream keepalive and an -O0 Debug Build

Nginx Reverse Proxy QPS Dropped 15x: A Missing upstream keepalive and an -O0 Debug Build

Nginx Reverse Proxy QPS Dropped 15x: A Missing upstream keepalive and an -O0 Debug Build

Non-Invasive Java Profiler: Capture Method Arguments in Production Without a Java Agent

Non-Invasive Java Profiler: Capture Method Arguments in Production Without a Java Agent

Non-Invasive Java Profiler: Capture Method Arguments in Production Without a Java Agent

Photo by Philip Brown

The Wonderland of Dynamic Tracing (Part 1 of 3)

The Wonderland of Dynamic Tracing (Part 1 of 3)

Photo by Jose G. Ortega Castro

How OpenResty and Nginx Shared Memory Zones Consume RAM

How OpenResty and Nginx Shared Memory Zones Consume RAM

Photo by Harrison Broadbent

Nginx Memory Usage Explained: Where the RAM Actually Goes

Nginx Memory Usage Explained: Where the RAM Actually Goes

OpenResty XRay reduce your CPU usage up to  90%
OpenResty XRay reduce your CPU usage up to 90%
Request free trial

Latest Articles

XDP DDoS Mitigation in Production: Million-PPS Kernel-Native Defense, Built into OpenResty Edge

  • The impossible triangle of DDoS mitigation architectures
  • How OpenResty Edge delivers XDP DDoS mitigation for all three goals
  • Measured performance: 170k–180k PPS on an AWS t3.small, million-PPS in the lab
  • Automated DDoS response as a prerequisite, not a perk
  • Observability: real-time DDoS mitigation metrics
  • FAQ: XDP DDoS mitigation
  • The impossible triangle of DDoS mitigation architectures
  • How OpenResty Edge delivers XDP DDoS mitigation for all three goals
  • Measured performance: 170k–180k PPS on an AWS t3.small, million-PPS in the lab
  • Automated DDoS response as a prerequisite, not a perk
  • Observability: real-time DDoS mitigation metrics
  • FAQ: XDP DDoS mitigation

OpenResty Edge Database Backup and Failover: Why Replication Is Not a Backup

  • First line of defense: scheduled database backups and off-host sync
  • Second line of defense: does streaming replication protect against accidental deletion?
  • Third line of defense: automatic database failover cluster
  • Backup vs. replication vs. failover: which do you need?
  • Frequently asked questions
  • First line of defense: scheduled database backups and off-host sync
  • Second line of defense: does streaming replication protect against accidental deletion?
  • Third line of defense: automatic database failover cluster
  • Backup vs. replication vs. failover: which do you need?
  • Frequently asked questions

Kubernetes Gateway Lifecycle Management: Auto-Approve Nodes & Unify Multi-Cluster Control with OpenResty Edge

  • Why traditional gateway management breaks in Kubernetes
  • How to automate Kubernetes gateway node onboarding and approval
  • Managing multiple Kubernetes clusters from a single control plane
  • Two-tier upstreams: mapping Kubernetes upstream ownership to teams
  • Summary: choosing a gateway for Kubernetes
  • Why traditional gateway management breaks in Kubernetes
  • How to automate Kubernetes gateway node onboarding and approval
  • Managing multiple Kubernetes clusters from a single control plane
  • Two-tier upstreams: mapping Kubernetes upstream ownership to teams
  • Summary: choosing a gateway for Kubernetes

OpenResty Edge Configuration as Code: GitOps-Driven Gateway Management with `edge2yaml`

  • What Is edge2yaml?
  • When to Use edge2yaml: GitOps, Multi-Environment Sync, and Batch Editing
  • edge2yaml vs. OpenResty Edge Admin’s Native Configuration Management
  • Frequently Asked Questions
  • What Is edge2yaml?
  • When to Use edge2yaml: GitOps, Multi-Environment Sync, and Batch Editing
  • edge2yaml vs. OpenResty Edge Admin’s Native Configuration Management
  • Frequently Asked Questions

lua-cjson Too Slow? jit.cjson Speeds Up JSON Encoding in OpenResty 18x

  • Where Exactly Is the Performance Ceiling?
  • Common Workaround Strategies and Their Limitations
  • Why Custom Development or Hacking Existing Libraries is a Bad Idea
  • Seeking a More Direct Breakthrough
  • Infrastructure-Level Optimization: jit.cjson
  • Why the Official Solution is the Safer Bet
  • Minimal Adoption Cost
  • Where Exactly Is the Performance Ceiling?
  • Common Workaround Strategies and Their Limitations
  • Why Custom Development or Hacking Existing Libraries is a Bad Idea
  • Seeking a More Direct Breakthrough
  • Infrastructure-Level Optimization: jit.cjson
  • Why the Official Solution is the Safer Bet
  • Minimal Adoption Cost

Minify HTML, CSS & JS Inside Nginx: OpenResty's 120 MB/s Streaming Minifiers

  • When You Can’t Touch the Build Pipeline
  • Why a Regex Won’t Cut It
  • Three Approaches That Almost Work
  • A Streaming FSM for Each Language, Compiled to Native Code
  • Five-Minute Setup: A Configuration Example
  • Four Things to Know Before Going Live
  • When You Can’t Touch the Build Pipeline
  • Why a Regex Won’t Cut It
  • Three Approaches That Almost Work
  • A Streaming FSM for Each Language, Compiled to Native Code
  • Five-Minute Setup: A Configuration Example
  • Four Things to Know Before Going Live

Binary Vulnerability Scanning: Catch Backported Patches, Cut False Positives

  • Why Version-Matching Vulnerability Scanning Fails: Three Compounding Costs
  • How OpenResty XRay’s Binary Vulnerability Scanning Works: The Evidence-First Model
  • Case Study: Binary Vulnerability Scanning on Rocky Linux with Dual OpenSSL Versions
  • From Alert Fatigue to Precision: A Sustainable Vulnerability Scanning Practice
  • Why Version-Matching Vulnerability Scanning Fails: Three Compounding Costs
  • How OpenResty XRay’s Binary Vulnerability Scanning Works: The Evidence-First Model
  • Case Study: Binary Vulnerability Scanning on Rocky Linux with Dual OpenSSL Versions
  • From Alert Fatigue to Precision: A Sustainable Vulnerability Scanning Practice

P99 Latency in a D Service Cut 73%: Conservative GC Meets an O(n) Query Under Load

  • Analyzing GC Traps and Business Hotspots in the Flame Graph
  • Optimization Roadmap: Why Sequence Is More Important Than Action
  • Conclusion: From Code Logic to Runtime Reality
  • Analyzing GC Traps and Business Hotspots in the Flame Graph
  • Optimization Roadmap: Why Sequence Is More Important Than Action
  • Conclusion: From Code Logic to Runtime Reality

End-to-End Client Real IP Passthrough in OpenResty Edge

  • Use Cases and Topology
  • IP Passthrough Methods Overview
  • OpenResty Edge Configuration
  • Key Variables
  • Page Rules
  • Verification
  • Use Cases and Topology
  • IP Passthrough Methods Overview
  • OpenResty Edge Configuration
  • Key Variables
  • Page Rules
  • Verification

How OpenResty XRay Enables Full-Stack Dynamic Tracing in Production

  • Where Do Existing Dynamic Tracing Frameworks Fall Short in Production?
  • How Did OpenResty XRay Rethink Dynamic Tracing at the Architecture Level?
  • What Is a Full-Stack Flame Graph and How Do You Use It to Diagnose Performance Bottlenecks?
  • How Is OpenResty XRay Expanding Its Observability Coverage Over Time?
  • Further Reading and Real-World Case Studie
  • Where Do Existing Dynamic Tracing Frameworks Fall Short in Production?
  • How Did OpenResty XRay Rethink Dynamic Tracing at the Architecture Level?
  • What Is a Full-Stack Flame Graph and How Do You Use It to Diagnose Performance Bottlenecks?
  • How Is OpenResty XRay Expanding Its Observability Coverage Over Time?
  • Further Reading and Real-World Case Studie

OpenResty Edge: Private CDN, Universal Gateway & WAF in One Platform

  • What Is OpenResty Edge? Architecture Overview
  • OpenResty Edge vs. Traditional Stack: 4 Problems Solved
  • Universal Gateway & Load Balancing: Dynamic Routing for Microservices
  • Real-World Case Studies: OTA, News, and SaaS Deployments
  • What Is OpenResty Edge? Architecture Overview
  • OpenResty Edge vs. Traditional Stack: 4 Problems Solved
  • Universal Gateway & Load Balancing: Dynamic Routing for Microservices
  • Real-World Case Studies: OTA, News, and SaaS Deployments

Introduction to OpenResty XRay

  • Core Philosophy: A Tracing Engine Built for the Unknown
  • Turning Noise into Signal: How XRay Demystifies Production Issues
  • Empowering Engineering Teams in Cloud-Native Reality
  • Built on a Robust, Open Technological Foundatione
  • Real-World Success Stories
  • Core Philosophy: A Tracing Engine Built for the Unknown
  • Turning Noise into Signal: How XRay Demystifies Production Issues
  • Empowering Engineering Teams in Cloud-Native Reality
  • Built on a Robust, Open Technological Foundatione
  • Real-World Success Stories

lua-resty-kafka Blocking Your Nginx Workers? Meet lua-resty-kafka-fast

  • Three Common Anti-Patterns We See in Production
  • What is lua-resty-kafka-fast
  • lua-resty-kafka vs lua-resty-kafka-fast
  • What This Changes at the Architecture Level
  • FAQ
  • Three Common Anti-Patterns We See in Production
  • What is lua-resty-kafka-fast
  • lua-resty-kafka vs lua-resty-kafka-fast
  • What This Changes at the Architecture Level
  • FAQ

Nginx Reverse Proxy QPS Dropped 15x: A Missing upstream keepalive and an -O0 Debug Build

  • A 15x Slower Nginx Reverse Proxy — and No Errors in the Logs
  • Flame Graphs Expose a Connection Storm: The Missing upstream keepalive
  • The Remaining 10% Gap: Baseline Comparison Points to the Compiler
  • How an -O0 Debug Build Cost Us 10% of Performance
  • A 15x Slower Nginx Reverse Proxy — and No Errors in the Logs
  • Flame Graphs Expose a Connection Storm: The Missing upstream keepalive
  • The Remaining 10% Gap: Baseline Comparison Points to the Compiler
  • How an -O0 Debug Build Cost Us 10% of Performance
Contact us

OpenResty open-source community workspace

Please join us here and share your thoughts and questions with us, we can't wait to see you there!


limited time offer

Request TRIAL today and receive a diagnostic REPORT
Learn more

Love to hear from you, Get in touch 👋

Message was sent successfully!

Our Team will get back to you within 24 hours.
x