Important: New Signing key for Passenger packages In accordance with the deprecation of the use of SHA-1 signing for keys used to sign linux repos, Phusion is moving to a new signing key signed with a SHA-256 signature. This particularly affects users who install Passen
ActionCable under stress: Finding a DoS vulnerability in Rails 5 WebSockets Apps In this article we will show you how Rails 5.0.0 ActionCable applications on Puma, the new default Rails app server, might be exposed to denial of service by slow clients. We will be using the OS X network shaping tools
Resolving Web Application Resource Bottlenecks with Concurrency This article is a general introduction into the bottlenecks of web applications and how application servers can deal with them to improve request throughput and response times. We will start off by introducing the role o
Hired: Junior Client Success Manager Update: this position has been filled and is no longer available. Hey you! We are looking for an energetic, passionate and fun Junior Client Success Manager (full-time) to help build our customer success unit from th
Efficiently and Conveniently Building Ruby and Node.js Application Docker Containers for Production In this article we will show how we build Docker application containers in two steps and explain why that is a useful thing to do. We then walk you through writing a build script that not only builds an application conta
Using Rails 5 ActionCable and RethinkDB to build a Reactive WebSocket App In this article we will demonstrate how to build a WebSockets driven application using Rails 5’s ActionCable. By using RethinkDB's active changefeeds feature we can eliminate the need for a separate event broadcastin
Web applications on Phusion Passenger are not vulnerable to HTTPoxy A short time ago an old security issue was revealed to still be present in many modern application servers. The issue is now known as HTTPoxy, and no fewer than 6 CVE's were issued to document the vulnerabilities in
ActionCable under stress: fixing data corruption, socket leak issues in Rails 5 During performance testing of the Rails 5.0.0 release we discovered two bugs in Rails. One data corruption bug that occurs when two threads transmit on the same channel, and another bug causing socket leaks that could ev
Keep tabs on your application with the Union Station Weekly Summary Union Station's weekly summary is an email service to keep your team up to date on the current status of your application. The summary contains statistics on throughput, performance, deployments, and system load. Not
