Created attachment 165397 [details] shar file of stud port stud is a network proxy that terminates TLS/SSL connections and forwards the unencrypted traffic to some backend. It's designed to handle 10s of thousands of connections efficiently on multicore machines. -- Initially this software was developed by http://bu.mp at https://github.com/bumptech/stud, but apparently when the company closed/sold, they stopped maintaining it. Since there were a lot of pull-requests for improvements, i took it upon myself to merge the most useful ones and have them tested. With the new patches we score an A-rating with SSLlabs on HTTP (A+ requires HSTS header) while having it NOT crash under heavy load. What is heavy load? - When haproxy gets constantly killed with SIGBUS - When stunnel constantly segfaults Portlint seems happy, tested with poudriere on 10.2/9.3 w/ x86/amd64 each.
A commit references this bug: Author: koobs Date: Mon Feb 1 11:02:50 UTC 2016 New revision: 407704 URL: https://svnweb.freebsd.org/changeset/ports/407704 Log: [NEW] security/stud: Scalable TLS Unwrapping Daemon stud is a network proxy that terminates TLS/SSL connections and forwards the unencrypted traffic to some backend. It's designed to handle 10s of thousands of connections efficiently on multicore machines. WWW: https://github.com/bumptech/stud PR: 206134 Submitted by: Franz Bettag <franz bett ag> Changes: head/security/Makefile head/security/stud/ head/security/stud/Makefile head/security/stud/distinfo head/security/stud/pkg-descr
Committed with changes: * Install man page * Remove custom do-install * Strip binary * Sort USE{S} entries * Use LIB_DEPENDS, not BUILD_DEPENDS for libev Thanks Franz!