Skip to content

drop the static profiles from the four entries that fail only static - #1294

Merged
MDA2AV merged 2 commits into
mainfrom
chore/drop-static-failing-profiles
Aug 24, 2026
Merged

drop the static profiles from the four entries that fail only static#1294
MDA2AV merged 2 commits into
mainfrom
chore/drop-static-failing-profiles

Conversation

@MDA2AV

@MDA2AV MDA2AV commented Aug 24, 2026

Copy link
Copy Markdown
Owner

From the full sweep on #1292. These four fail validation on the static staleness probe and nothing else, so the entries stay enabled and keep every other profile they publish — they lose static, static-tls and the 21 result keys those produced.

entry tier dropped
fastpysgi-wsgi engine static, static-tls
uvicorn engine static, static-tls
h2o infrastructure static, static-tls
varnish infrastructure static

This is the same treatment #1290 gave the flagship/emerging/experimental entries in this position, applied to the tiers that were outside its scope.

One difference worth stating: for infrastructure this is a real result, not a formality. h2o and varnish are proxies whose rule explicitly permits open_file_cache and mmap, and they are given a 30s window against the framework tiers' 2s. They still serve the old bytes after it.

Nothing else is touched — static-h2 and static-h3 are left alone, and every other profile keeps its results.

From the sweep on #1292. These four fail validation on the static staleness
probe and on nothing else, so the entries stay enabled and keep every other
profile they publish; they lose static, static-tls and the 21 result keys
those produced.

  fastpysgi-wsgi, uvicorn   engine
  h2o, varnish              infrastructure

Same treatment #1290 gave the flagship, emerging and experimental entries in
this position, applied to the tiers that were left out of it -- with one
difference worth stating: for infrastructure this is a real result rather
than a formality. h2o and varnish are proxies whose rule explicitly allows
open_file_cache and mmap, and they were given a 30s window against the
framework tiers' 2s. They still serve the old bytes after it.
@github-actions

github-actions Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

👋 Heads up! This PR modifies the following frameworks:

MDA2AV added a commit that referenced this pull request Aug 24, 2026
Both fail the fragmentation checks against main, independently of anything
unmerged:

  frankenphp-trueasync   fails four request shapes -- randomized query,
                         chunked, chunked in two chunks, randomized body
  laravel                fails POST chunked and chunked in two chunks

A server that cannot reassemble a request split across TCP segments is not
answering the profile it publishes numbers for.

This PR previously also disabled zix-http2, warp, http4s and fastpysgi-asgi.
That was wrong on all four:

  zix-http2, warp   fail only the TLS checks added in #1292, which is not
                    merged. The findings are real -- zix-http2 serves a
                    self-signed Ed25519 certificate instead of the mounted
                    RSA pair, warp completes TLS 1.0 handshakes -- but the
                    rule that forbids them is not in force yet, so disabling
                    them now punishes entries under a rule that does not
                    exist. Both pass on main today.
  http4s            failed POST chunked once on the sweep and passes on
                    main. One flaky observation is not a verdict.
  fastpysgi-asgi    fails static and only static on main, so it belongs
                    with the drop-the-profile treatment in #1294, not here.
It fails static and only static against main -- 53 passed, 4 failed, every
failure a staleness probe -- so it belongs here rather than in #1295, where
it was first put. The sweep that classified it ran on the #1292 branch and
showed a fragmentation failure that main does not reproduce.
@MDA2AV
MDA2AV merged commit d327def into main Aug 24, 2026
8 checks passed
MDA2AV added a commit that referenced this pull request Aug 24, 2026
…1295)

Both fail the fragmentation checks against main, independently of anything
unmerged:

  frankenphp-trueasync   fails four request shapes -- randomized query,
                         chunked, chunked in two chunks, randomized body
  laravel                fails POST chunked and chunked in two chunks

A server that cannot reassemble a request split across TCP segments is not
answering the profile it publishes numbers for.

This PR previously also disabled zix-http2, warp, http4s and fastpysgi-asgi.
That was wrong on all four:

  zix-http2, warp   fail only the TLS checks added in #1292, which is not
                    merged. The findings are real -- zix-http2 serves a
                    self-signed Ed25519 certificate instead of the mounted
                    RSA pair, warp completes TLS 1.0 handshakes -- but the
                    rule that forbids them is not in force yet, so disabling
                    them now punishes entries under a rule that does not
                    exist. Both pass on main today.
  http4s            failed POST chunked once on the sweep and passes on
                    main. One flaky observation is not a verdict.
  fastpysgi-asgi    fails static and only static on main, so it belongs
                    with the drop-the-profile treatment in #1294, not here.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant