mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 16:37:04 +00:00
82b0522c5b
* perf(aggregator): async-sweep — 243 blocking route handlers async def→def (#738) Mounted in the aggregator's single event loop, an 'async def' route handler that runs blocking code (subprocess/journalctl/openssl/argon2) freezes the WHOLE loop -> aggregator.sock Connection refused -> 502 board-wide. Deterministic AST codemod (scripts/async-sweep.py) converts route handlers that (a) are decorated with an HTTP verb, (b) contain a known blocking call, (c) have NO await/async-with/async-for/yield, (d) are never used as a coroutine elsewhere -> plain 'def'. Starlette then runs them in the AnyIO threadpool, so the blocking call no longer stalls the gateway. await/stream/ websocket handlers are left untouched. Every file py_compile-checked. 243 handlers across 56 modules (system 17, qos 13, netdiag/hexo 12, hub 11...). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * perf(aggregator): raise AnyIO threadpool to 80 tokens (#738) The async-sweep moves ~243 blocking handlers to the threadpool. With ~110 modules in one process, the default 40-token pool can queue head-of-line under concurrent blocking load. Raise to 80 on startup (best-effort, never breaks boot). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * perf(hub): double-buffer status cache + emojized health page (#738) Navbar status (menu + health-batch) is now a strict double-buffer cache: - request handlers NEVER compute on the request path — they return the current snapshot instantly (or a 'warming' placeholder), so the sidebar's polling can no longer serialize behind a ~3s systemctl walk and starve the loop; - the background refresher is kicked from the request path (_ensure_bg) because mounted sub-apps receive neither startup nor @app.middleware events under the aggregator — the previous lazy-start middleware never fired there; - snapshots are built complete then swapped atomically, so the dashboard never shows partial/bad counts. Served by the dedicated secubox-hub process (:8001, isolated loop) the navbar stays <50ms and holds 200 under 25+ concurrent polls where the aggregator- mounted copy wedged (000). health.js: 🟢🟡🔴 emoji status indicators. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * style(hub): render health status emoji cleanly (neutralize .led dot) (#738) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> * perf(sidebar): kill per-module health storm, use batch endpoint (#738) The navbar refreshed LEDs by firing ONE /api/v1/<module>/health request per module — ~119 requests every 30s, in batches of 8 — straight at the aggregator's single shared event loop. Combined with the in-process module mount this is a prime driver of the recurring board-wide 502 wedge (user-identified). checkAllHealth + refreshStaleHealth now call /api/v1/hub/public/health-batch ONCE (served by the dedicated, double-buffered hub process) and populate every module's LED from that single response. 119 reqs/cycle -> 1. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> --------- Co-authored-by: CyberMind-FR <gandalf@Gk2.net> Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| api | ||
| debian | ||
| errors | ||
| menu.d | ||
| nginx | ||
| sbin | ||
| tests | ||
| www/haproxy | ||
| README.md | ||
⚡ HAProxy
Load balancer with TLS 1.3
Category: Network
Screenshot
Features
- Backend management
- Stats
- ACLs
- SSL termination
- Health checks
Installation
# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash
# Install package
sudo apt install secubox-haproxy
Configuration
Configuration file: /etc/secubox/haproxy.toml
API Endpoints
GET /api/v1/haproxy/status- Module statusGET /api/v1/haproxy/health- Health check
License
LicenseRef-CMSD-1.0 (Source-Disclosed License) — CyberMind © 2024-2026. See LICENCE-CMSD-1.0.md.