cloudflare/pingora

Pingora is a high-performance, programmable network framework designed for building scalable HTTP and TCP proxies at Internet scale. It provides a modular architecture for handling HTTP/1.x, HTTP/2, and custom protocols, with pluggable TLS backends (OpenSSL, BoringSSL, rustls, s2n-tls) and extensible connection filtering. The system supports advanced proxying features including caching, load balancing, and subrequest piping, all managed through a service-oriented lifecycle with dependency injection and graceful upgrade capabilities.

This period focused on significantly expanding the framework's protocol support by introducing full HTTP/1.x and HTTP/2 implementations, alongside a modular TLS system supporting OpenSSL, BoringSSL, s2n-tls, and rustls. The work also introduced a pluggable HTTP module system, advanced caching and load balancing capabilities, and robust service lifecycle management for high-concurrency proxying.

59 changes

This period focused on expanding TLS capabilities by integrating s2n-tls with configurable handshake offloading and TLS 1.3 keying material export. It also introduced robust subrequest handling, including body piping and cancel-safe task management, while extracting Prometheus metrics into a standalone crate.

9 changes

cloudflare/pingora was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.