Community & Careers questions and discussions

Editorial question28K views934 votes0 answers2,761 following

AI-generated

What timeout should the Couchbase upgrade service use before marking a node as upgrade‑failed?

When a Couchbase node upgrade fails, the upgrade service marks the node as ‘upgrade‑failed’ and leaves the cluster in a rebalance‑required state, but it does not automatically revert the node to the previous version. Administrators must decide how long to wait for the service to finish its internal retry before taking manual recovery actions, yet the documen

couchbase timeout recoveryTasadduq Burneyowner29.5K rep · 05 Jul 2022, 07:06 UTC

Editorial question88.1K views2,144 votes0 answers4,297 following

AI-generated

PHP Garbage Collection: Memory growth in long-running processes with circular references

In long-running PHP processes, such as worker scripts or daemons, memory consumption may increase over time despite the use of reference counting. While PHP employs a cycle collector to handle circular references, the timing and efficiency of this reclamation can impact stability when scripts operate near the memory_limit threshold. There is a trade-off betw

garbage-collection circular-references memory-managementTasadduq Burneyowner29.5K rep · 20 Jun 2022, 17:35 UTC

Editorial question80.8K views914 votes0 answers2,057 following

AI-generated

OpenSSL default handling of expired client certificates during mutual TLS

The goal is to enforce least‑privilege authentication by ensuring that a TLS server rejects connections when the client presents an expired certificate, even when SSL_VERIFY_PEER is set. OpenSSL completes the handshake and stores the error X509_V_ERR_CERT_HAS_EXPIRED in the verification result, but it does not automatically abort the connection. The applicat

certificate-validation tls

opensslTasadduq Burneyowner29.5K rep · 20 Jun 2022, 04:33 UTC

Editorial question18.7K views2,933 votes0 answers3,991 following

AI-generated

Embedded SQLite vs External etcd: Simplicity vs Scalability for Edge Deployments

Goal Determine the optimal data‑store strategy for a low‑resource edge node that must balance minimal configuration with resilience to data corruption. Constraints k3s offers two documented modes: embedded SQLite (default) and external etcd. SQLite stores all API objects in a single local file (k3s.db) and the process terminates if the file becomes corrupted

k3s etcd

sqliteTasadduq Burneyowner29.5K rep · 05 Jun 2022, 05:48 UTC

Editorial question121.2K views902 votes0 answers2,125 following

AI-generated

Travis CLI Push vs. Third-Party CD Pull for Zero-Downtime Deployments

When orchestrating a zero-downtime migration for a Java/Hibernate application, the deployment phase must ensure that database schema updates and application binaries are synchronized without interrupting active traffic. Since Travis CI serves as the build and test orchestrator rather than the hosting environment, the hand-off to the production infrastructure

travis-ci continuous-delivery

javaTasadduq Burneyowner29.5K rep · 30 May 2022, 13:53 UTC

Editorial question148.3K views1,996 votes0 answers4,825 following

AI-generated

What latency metric should capture Redux middleware overhead before optimization?

Goal: Determine a reliable, low‑overhead metric that reflects the extra time introduced by Redux middleware on each state update so teams can decide whether optimization is warranted. Constraints: Redux core does not prescribe a standard measurement; teams must choose between action‑processing latency, store mutation cost, or re‑render frequency. Profiling t

profiling performance

reduxTasadduq Burneyowner29.5K rep · 16 May 2022, 13:07 UTC

Editorial question137.2K views3,684 votes0 answers2,027 following

AI-generated

Does Indy's IdHTTP send SNI when connecting to an HTTPS site using only an IP address?

The goal is to confirm whether the IdHTTP component automatically includes the Server Name Indication (SNI) extension in the TLS ClientHello when the destination is specified by a raw IP address rather than a hostname. Indy’s IdSSLIOHandlerSocketOpenSSL sets the SNI extension only when the Host property of IdHTTP is explicitly assigned; if the Host property

indy

delphi sniTasadduq Burneyowner29.5K rep · 10 May 2022, 02:47 UTC

Editorial question95.9K views3,325 votes0 answers3,985 following

AI-generated

Manual makepkg workflow vs AUR helpers for dependency auditing

Maintaining a secure Arch Linux system requires a decision on how to handle packages from the Arch User Repository (AUR). The official recommendation emphasizes auditing PKGBUILD scripts to prevent the execution of malicious code during the build process. The manual makepkg workflow provides full transparency by requiring the user to clone the repository and

archlinux pacman aurTasadduq Burneyowner29.5K rep · 01 May 2022, 17:08 UTC

Editorial question131.5K views3,827 votes0 answers3,039 following

AI-generated

Devise token expiration: immediate revocation vs. grace period?

Problem Statement In a Rails application using Devise’s :token_authenticatable module, tokens are configured to expire after a set period via config.expire_auth_token_on and config.expire_auth_token . The library invalidates a token immediately upon expiration but does not provide a built‑in grace period or delayed revocation mechanism. Constraints & Unc

rails authentication deviseTasadduq Burneyowner29.5K rep · 22 Apr 2022, 07:50 UTC