← Back to context

Comment by pornel

8 months ago

In response to this incident Cloudflare has made big engineering changes, including huge work to move away from C as much as possible.

The offending parsers were rewritten in Rust (https://github.com/cloudflare/lol-html), as well as WAF, image optimization, and a few others. Nginx is being replaced with a custom cache server.

New implementations are using either the Workers platform, or are written in Rust or Golang.

Memory safety doesn't fix fundamental design flaws.

  • This is an empty tautology. You have no insight into the actual design, so I presume your fundamental design flaw is the CDN existing.