6b0a30d004
New post on reqwest HTTP/2 window tuning and request hedging (Dean & Barroso's "The Tail at Scale" applied to DNS forwarding). Covers DoH forwarding p99 improvement and cold recursive resolution from 2.3s to 538ms. Also adds blog build infrastructure: index generation script, draft preview server, hero metrics/before-after CSS, and normalizes date format across existing posts.
209 lines
5.4 KiB
HTML
209 lines
5.4 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Blog — Numa</title>
|
|
<meta name="description" content="Technical writing about DNS, Rust, and building infrastructure from scratch.">
|
|
<link rel="stylesheet" href="/fonts/fonts.css">
|
|
<style>
|
|
*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
|
|
|
|
:root {
|
|
--bg-deep: #f5f0e8;
|
|
--bg-surface: #ece5da;
|
|
--bg-card: #faf7f2;
|
|
--amber: #c0623a;
|
|
--amber-dim: #9e4e2d;
|
|
--teal: #6b7c4e;
|
|
--text-primary: #2c2418;
|
|
--text-secondary: #6b5e4f;
|
|
--text-dim: #a39888;
|
|
--border: rgba(0, 0, 0, 0.08);
|
|
--font-display: 'Instrument Serif', Georgia, serif;
|
|
--font-body: 'DM Sans', system-ui, sans-serif;
|
|
--font-mono: 'JetBrains Mono', monospace;
|
|
}
|
|
|
|
body {
|
|
background: var(--bg-deep);
|
|
color: var(--text-primary);
|
|
font-family: var(--font-body);
|
|
font-weight: 400;
|
|
line-height: 1.7;
|
|
-webkit-font-smoothing: antialiased;
|
|
}
|
|
|
|
body::before {
|
|
content: '';
|
|
position: fixed;
|
|
inset: 0;
|
|
background-image: url("data:image/svg+xml,%3Csvg viewBox='0 0 256 256' xmlns='http://www.w3.org/2000/svg'%3E%3Cfilter id='n'%3E%3CfeTurbulence type='fractalNoise' baseFrequency='0.9' numOctaves='4' stitchTiles='stitch'/%3E%3C/filter%3E%3Crect width='100%25' height='100%25' filter='url(%23n)' opacity='0.025'/%3E%3C/svg%3E");
|
|
pointer-events: none;
|
|
z-index: 9999;
|
|
}
|
|
|
|
.blog-nav {
|
|
padding: 1.5rem 2rem;
|
|
display: flex;
|
|
align-items: center;
|
|
gap: 1.5rem;
|
|
}
|
|
|
|
.blog-nav a {
|
|
font-family: var(--font-mono);
|
|
font-size: 0.75rem;
|
|
letter-spacing: 0.08em;
|
|
text-transform: uppercase;
|
|
color: var(--text-dim);
|
|
text-decoration: none;
|
|
transition: color 0.2s;
|
|
}
|
|
.blog-nav a:hover { color: var(--amber); }
|
|
|
|
.blog-nav .wordmark {
|
|
font-family: var(--font-display);
|
|
font-size: 1.4rem;
|
|
font-weight: 400;
|
|
color: var(--text-primary);
|
|
text-decoration: none;
|
|
text-transform: none;
|
|
letter-spacing: -0.02em;
|
|
}
|
|
.blog-nav .wordmark:hover { color: var(--amber); }
|
|
|
|
.blog-nav .sep {
|
|
color: var(--text-dim);
|
|
font-family: var(--font-mono);
|
|
font-size: 0.75rem;
|
|
}
|
|
|
|
.blog-index {
|
|
max-width: 720px;
|
|
margin: 0 auto;
|
|
padding: 3rem 2rem 6rem;
|
|
}
|
|
|
|
.blog-index h1 {
|
|
font-family: var(--font-display);
|
|
font-weight: 400;
|
|
font-size: 2.5rem;
|
|
margin-bottom: 3rem;
|
|
}
|
|
|
|
.post-list {
|
|
list-style: none;
|
|
}
|
|
|
|
.post-list li {
|
|
padding: 1.5rem 0;
|
|
border-bottom: 1px solid var(--border);
|
|
}
|
|
|
|
.post-list li:first-child {
|
|
border-top: 1px solid var(--border);
|
|
}
|
|
|
|
.post-list a {
|
|
text-decoration: none;
|
|
display: block;
|
|
}
|
|
|
|
.post-list .post-title {
|
|
font-family: var(--font-display);
|
|
font-size: 1.4rem;
|
|
font-weight: 600;
|
|
color: var(--text-primary);
|
|
line-height: 1.3;
|
|
margin-bottom: 0.4rem;
|
|
transition: color 0.2s;
|
|
}
|
|
|
|
.post-list a:hover .post-title {
|
|
color: var(--amber);
|
|
}
|
|
|
|
.post-list .post-desc {
|
|
font-size: 0.95rem;
|
|
color: var(--text-secondary);
|
|
line-height: 1.5;
|
|
margin-bottom: 0.4rem;
|
|
}
|
|
|
|
.post-list .post-date {
|
|
font-family: var(--font-mono);
|
|
font-size: 0.72rem;
|
|
color: var(--text-dim);
|
|
letter-spacing: 0.04em;
|
|
}
|
|
|
|
.blog-footer {
|
|
text-align: center;
|
|
padding: 3rem 2rem;
|
|
border-top: 1px solid var(--border);
|
|
max-width: 720px;
|
|
margin: 0 auto;
|
|
}
|
|
|
|
.blog-footer a {
|
|
font-family: var(--font-mono);
|
|
font-size: 0.75rem;
|
|
letter-spacing: 0.08em;
|
|
text-transform: uppercase;
|
|
color: var(--text-dim);
|
|
text-decoration: none;
|
|
margin: 0 1rem;
|
|
}
|
|
.blog-footer a:hover { color: var(--amber); }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
|
|
<nav class="blog-nav">
|
|
<a href="/" class="wordmark">Numa</a>
|
|
<span class="sep">/</span>
|
|
<a href="/blog/">Blog</a>
|
|
</nav>
|
|
|
|
<main class="blog-index">
|
|
<h1>Blog</h1>
|
|
<ul class="post-list">
|
|
<li>
|
|
<a href="/blog/posts/fixing-doh-tail-latency.html">
|
|
<div class="post-title">Fixing DNS tail latency with a 5-line config and a 50-line function</div>
|
|
<div class="post-desc">We had periodic 40-140ms DoH spikes from hyper's dispatch channel. The fix was reqwest window tuning and request hedging — Dean & Barroso's "The Tail at Scale," applied to a DNS forwarder. Same ideas took our cold recursive p99 from 2.3 seconds to 538ms.</div>
|
|
<div class="post-date">April 2026</div>
|
|
</a>
|
|
</li>
|
|
<li>
|
|
<a href="/blog/posts/dot-from-scratch.html">
|
|
<div class="post-title">DNS-over-TLS from Scratch in Rust</div>
|
|
<div class="post-desc">Building RFC 7858 on top of rustls — length-prefix framing, ALPN cross-protocol defense, and two bugs that only the strict clients caught.</div>
|
|
<div class="post-date">April 2026</div>
|
|
</a>
|
|
</li>
|
|
<li>
|
|
<a href="/blog/posts/dnssec-from-scratch.html">
|
|
<div class="post-title">Implementing DNSSEC from Scratch in Rust</div>
|
|
<div class="post-desc">Recursive resolution from root hints, chain-of-trust validation, NSEC/NSEC3 denial proofs, and what I learned implementing DNSSEC with zero DNS libraries.</div>
|
|
<div class="post-date">March 2026</div>
|
|
</a>
|
|
</li>
|
|
<li>
|
|
<a href="/blog/posts/dns-from-scratch.html">
|
|
<div class="post-title">I Built a DNS Resolver from Scratch in Rust</div>
|
|
<div class="post-desc">How DNS actually works at the wire level — label compression, TTL tricks, DoH, and what surprised me building a resolver with zero DNS libraries.</div>
|
|
<div class="post-date">March 2026</div>
|
|
</a>
|
|
</li>
|
|
</ul>
|
|
</main>
|
|
|
|
<footer class="blog-footer">
|
|
<a href="https://github.com/razvandimescu/numa">GitHub</a>
|
|
<a href="/">Home</a>
|
|
</footer>
|
|
|
|
</body>
|
|
</html>
|