Razvan Dimescu
6ceb14a54e
docs: add install/upgrade instructions, smarter benchmark priming
...
README: document `numa install`, `numa service`, Homebrew upgrade,
and `make deploy` workflows. Benchmark: replace fixed `sleep 4` with
`wait_for_priming` that polls cache entry count for stability.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-28 23:21:35 +02:00
Razvan Dimescu
5c5b7dbf58
feat: SRTT-based nameserver selection for recursive resolver
...
BIND-style Smoothed RTT (EWMA) tracking per NS IP address. The resolver
learns which nameservers respond fastest and prefers them, eliminating
cascading timeouts from slow/unreachable IPv6 servers.
- New src/srtt.rs: SrttCache with record_rtt, record_failure, sort_by_rtt
- EWMA formula: new = (old * 7 + sample) / 8, 5s failure penalty, 5min decay
- TCP penalty (+100ms) lets SRTT naturally deprioritize IPv6-over-TCP
- Enabled flag embedded in SrttCache (no-op when disabled)
- Batch eviction (64 entries) for O(1) amortized writes at capacity
- Configurable via [upstream] srtt = true/false (default: true)
- Benchmark script: scripts/benchmark.sh (full, cold, warm, compare-all)
- Benchmarks show 12x avg improvement, 0% queries >1s (was 58%)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-28 22:40:47 +02:00
Razvan Dimescu
3bfcd827ac
add TLS, service persistence, blocking panel, query types
...
- Local TLS: auto-generated CA + per-service certs (explicit SANs, not
wildcards — browsers reject *.numa under single-label TLDs). HTTPS
proxy on :443 via rustls/tokio-rustls. `numa install` trusts CA in
macOS Keychain / Linux ca-certificates.
- Service persistence: user-added services saved to
~/.config/numa/services.json, survive restarts.
- Blocking panel: renamed "Check Domain" to "Blocking" with sources
display, allowlist management UI, unpause button.
- Query types: recognize SOA, PTR, TXT, SRV, HTTPS (type 65) instead
of logging as UNKNOWN.
- Blocklist gzip: reqwest now decompresses gzip responses from CDNs.
- Unified config_dir() in lib.rs for consistent path resolution under
sudo and launchd. TLS certs use /usr/local/var/numa/ (writable as
root daemon).
- Dashboard UX: panel subtitles differentiating overrides vs services,
better placeholders, proxy route display, 600px query log height.
- Deploy: make deploy handles build+copy+codesign+restart cycle.
- Demo: scripts/record-demo.sh for recording hero GIF with CDP.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-21 01:15:07 +02:00
