nginx

Minimus publishes hundreds of distroless images with per-image vulnerability-reduction percentages — nginx at 100%, python at 98% — now free with no SLA or guaranteed patch timing, while paid tiers get fixes first.

The thread, with the co-founder present, circles one worry: free tiers vanish once they're load-bearing. Engineers also press on the unanswered basics — no Dockerfiles, unclear licensing, and a supply-chain trust gap against open-source Wolfi.

zeroserve's new Caddy-compat mode JIT-compiles a subset of Caddyfile directives to eBPF, then to native machine code, running it in an io_uring event loop for 3x throughput and 70% lower latency over Caddy.

The thread didn't dispute the numbers — it disputed the point. 'Caddy compatible minus everything that matters,' one wrote, since ACME and plugins are gone. Another did the math: at 35k qps on two threads, you're optimizing a metric that was never the bottleneck.