puma 3.12.6 → 6.3.0
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of puma might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/History.md +1806 -451
- data/LICENSE +23 -20
- data/README.md +217 -65
- data/bin/puma-wild +3 -9
- data/docs/architecture.md +59 -21
- data/docs/compile_options.md +55 -0
- data/docs/deployment.md +69 -58
- data/docs/fork_worker.md +31 -0
- data/docs/images/puma-connection-flow-no-reactor.png +0 -0
- data/docs/images/puma-connection-flow.png +0 -0
- data/docs/images/puma-general-arch.png +0 -0
- data/docs/jungle/README.md +9 -0
- data/{tools → docs}/jungle/rc.d/README.md +1 -1
- data/{tools → docs}/jungle/rc.d/puma +2 -2
- data/docs/kubernetes.md +66 -0
- data/docs/nginx.md +2 -2
- data/docs/plugins.md +22 -12
- data/docs/rails_dev_mode.md +28 -0
- data/docs/restart.md +47 -22
- data/docs/signals.md +13 -11
- data/docs/stats.md +142 -0
- data/docs/systemd.md +94 -120
- data/docs/testing_benchmarks_local_files.md +150 -0
- data/docs/testing_test_rackup_ci_files.md +36 -0
- data/ext/puma_http11/PumaHttp11Service.java +2 -2
- data/ext/puma_http11/ext_help.h +1 -1
- data/ext/puma_http11/extconf.rb +61 -3
- data/ext/puma_http11/http11_parser.c +103 -117
- data/ext/puma_http11/http11_parser.h +2 -2
- data/ext/puma_http11/http11_parser.java.rl +22 -38
- data/ext/puma_http11/http11_parser.rl +3 -3
- data/ext/puma_http11/http11_parser_common.rl +6 -6
- data/ext/puma_http11/mini_ssl.c +389 -99
- data/ext/puma_http11/no_ssl/PumaHttp11Service.java +15 -0
- data/ext/puma_http11/org/jruby/puma/Http11.java +108 -116
- data/ext/puma_http11/org/jruby/puma/Http11Parser.java +84 -99
- data/ext/puma_http11/org/jruby/puma/MiniSSL.java +248 -92
- data/ext/puma_http11/puma_http11.c +49 -57
- data/lib/puma/app/status.rb +71 -49
- data/lib/puma/binder.rb +244 -150
- data/lib/puma/cli.rb +38 -34
- data/lib/puma/client.rb +388 -244
- data/lib/puma/cluster/worker.rb +180 -0
- data/lib/puma/cluster/worker_handle.rb +97 -0
- data/lib/puma/cluster.rb +261 -243
- data/lib/puma/commonlogger.rb +21 -14
- data/lib/puma/configuration.rb +116 -88
- data/lib/puma/const.rb +154 -104
- data/lib/puma/control_cli.rb +115 -70
- data/lib/puma/detect.rb +33 -2
- data/lib/puma/dsl.rb +764 -134
- data/lib/puma/error_logger.rb +113 -0
- data/lib/puma/events.rb +16 -112
- data/lib/puma/io_buffer.rb +42 -5
- data/lib/puma/jruby_restart.rb +2 -59
- data/lib/puma/json_serialization.rb +96 -0
- data/lib/puma/launcher/bundle_pruner.rb +104 -0
- data/lib/puma/launcher.rb +184 -133
- data/lib/puma/log_writer.rb +147 -0
- data/lib/puma/minissl/context_builder.rb +93 -0
- data/lib/puma/minissl.rb +263 -70
- data/lib/puma/null_io.rb +18 -1
- data/lib/puma/plugin/systemd.rb +90 -0
- data/lib/puma/plugin/tmp_restart.rb +3 -1
- data/lib/puma/plugin.rb +7 -13
- data/lib/puma/rack/builder.rb +9 -11
- data/lib/puma/rack/urlmap.rb +2 -0
- data/lib/puma/rack_default.rb +21 -4
- data/lib/puma/reactor.rb +93 -315
- data/lib/puma/request.rb +671 -0
- data/lib/puma/runner.rb +94 -69
- data/lib/puma/sd_notify.rb +149 -0
- data/lib/puma/server.rb +327 -772
- data/lib/puma/single.rb +20 -74
- data/lib/puma/state_file.rb +45 -8
- data/lib/puma/thread_pool.rb +146 -92
- data/lib/puma/util.rb +22 -10
- data/lib/puma.rb +60 -5
- data/lib/rack/handler/puma.rb +116 -90
- data/tools/Dockerfile +16 -0
- data/tools/trickletest.rb +0 -1
- metadata +54 -32
- data/ext/puma_http11/io_buffer.c +0 -155
- data/lib/puma/accept_nonblock.rb +0 -23
- data/lib/puma/compat.rb +0 -14
- data/lib/puma/convenient.rb +0 -25
- data/lib/puma/daemon_ext.rb +0 -33
- data/lib/puma/delegation.rb +0 -13
- data/lib/puma/java_io_buffer.rb +0 -47
- data/lib/puma/rack/backports/uri/common_193.rb +0 -33
- data/lib/puma/tcp_logger.rb +0 -41
- data/tools/jungle/README.md +0 -19
- data/tools/jungle/init.d/README.md +0 -61
- data/tools/jungle/init.d/puma +0 -421
- data/tools/jungle/init.d/run-puma +0 -18
- data/tools/jungle/upstart/README.md +0 -61
- data/tools/jungle/upstart/puma-manager.conf +0 -31
- data/tools/jungle/upstart/puma.conf +0 -69
- /data/{tools → docs}/jungle/rc.d/puma.conf +0 -0
data/LICENSE
CHANGED
@@ -1,26 +1,29 @@
|
|
1
|
-
|
2
|
-
|
1
|
+
BSD 3-Clause License
|
2
|
+
|
3
|
+
Copyright (c) 2019, Evan Phoenix. Some code by Zed Shaw, (c) 2005.
|
3
4
|
All rights reserved.
|
4
5
|
|
5
|
-
Redistribution and use in source and binary forms, with or without
|
6
|
+
Redistribution and use in source and binary forms, with or without
|
6
7
|
modification, are permitted provided that the following conditions are met:
|
7
8
|
|
8
|
-
|
9
|
-
|
10
|
-
|
11
|
-
|
12
|
-
|
13
|
-
|
14
|
-
|
15
|
-
|
9
|
+
1. Redistributions of source code must retain the above copyright notice, this
|
10
|
+
list of conditions and the following disclaimer.
|
11
|
+
|
12
|
+
2. Redistributions in binary form must reproduce the above copyright notice,
|
13
|
+
this list of conditions and the following disclaimer in the documentation
|
14
|
+
and/or other materials provided with the distribution.
|
15
|
+
|
16
|
+
3. Neither the name of the copyright holder nor the names of its
|
17
|
+
contributors may be used to endorse or promote products derived from
|
18
|
+
this software without specific prior written permission.
|
16
19
|
|
17
|
-
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
18
|
-
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
19
|
-
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
20
|
-
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
21
|
-
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
22
|
-
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
23
|
-
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
24
|
-
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
25
|
-
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
20
|
+
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
21
|
+
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
22
|
+
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
23
|
+
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
24
|
+
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
25
|
+
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
26
|
+
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
27
|
+
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
28
|
+
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
26
29
|
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
data/README.md
CHANGED
@@ -1,45 +1,54 @@
|
|
1
1
|
<p align="center">
|
2
|
-
<img src="
|
2
|
+
<img src="https://puma.io/images/logos/puma-logo-large.png">
|
3
3
|
</p>
|
4
4
|
|
5
|
-
# Puma: A Ruby Web Server Built For
|
5
|
+
# Puma: A Ruby Web Server Built For Parallelism
|
6
6
|
|
7
|
-
[![
|
8
|
-
[![Build Status](https://secure.travis-ci.org/puma/puma.svg)](http://travis-ci.org/puma/puma)
|
9
|
-
[![AppVeyor](https://img.shields.io/appveyor/ci/nateberkopec/puma.svg)](https://ci.appveyor.com/project/nateberkopec/puma)
|
10
|
-
[![Dependency Status](https://gemnasium.com/puma/puma.svg)](https://gemnasium.com/puma/puma)
|
7
|
+
[![Actions](https://github.com/puma/puma/workflows/Tests/badge.svg?branch=master)](https://github.com/puma/puma/actions?query=workflow%3ATests)
|
11
8
|
[![Code Climate](https://codeclimate.com/github/puma/puma.svg)](https://codeclimate.com/github/puma/puma)
|
9
|
+
[![StackOverflow](https://img.shields.io/badge/stackoverflow-Puma-blue.svg)]( https://stackoverflow.com/questions/tagged/puma )
|
12
10
|
|
13
|
-
Puma is a **simple, fast, threaded, and highly
|
11
|
+
Puma is a **simple, fast, multi-threaded, and highly parallel HTTP 1.1 server for Ruby/Rack applications**.
|
14
12
|
|
15
|
-
## Built For Speed &
|
13
|
+
## Built For Speed & Parallelism
|
16
14
|
|
17
|
-
|
15
|
+
Puma processes requests using a C-optimized Ragel extension (inherited from Mongrel) that provides fast, accurate HTTP 1.1 protocol parsing in a portable way. Puma then serves the request using a thread pool. Each request is served in a separate thread, so truly parallel Ruby implementations (JRuby, Rubinius) will use all available CPU cores.
|
18
16
|
|
19
|
-
|
17
|
+
Originally designed as a server for [Rubinius](https://github.com/rubinius/rubinius), Puma also works well with Ruby (MRI) and JRuby.
|
20
18
|
|
21
|
-
On MRI, there is a Global VM Lock (GVL) that ensures only one thread can run Ruby code at a time. But if you're doing a lot of blocking IO (such as HTTP calls to external APIs like Twitter), Puma still improves MRI's throughput by allowing
|
19
|
+
On MRI, there is a Global VM Lock (GVL) that ensures only one thread can run Ruby code at a time. But if you're doing a lot of blocking IO (such as HTTP calls to external APIs like Twitter), Puma still improves MRI's throughput by allowing IO waiting to be done in parallel.
|
22
20
|
|
23
21
|
## Quick Start
|
24
22
|
|
25
23
|
```
|
26
24
|
$ gem install puma
|
27
|
-
$ puma
|
28
|
-
```
|
25
|
+
$ puma
|
26
|
+
```
|
27
|
+
|
28
|
+
Without arguments, puma will look for a rackup (.ru) file in
|
29
|
+
working directory called `config.ru`.
|
30
|
+
|
31
|
+
## SSL Connection Support
|
32
|
+
|
33
|
+
Puma will install/compile with support for ssl sockets, assuming OpenSSL
|
34
|
+
development files are installed on the system.
|
35
|
+
|
36
|
+
If the system does not have OpenSSL development files installed, Puma will
|
37
|
+
install/compile, but it will not allow ssl connections.
|
29
38
|
|
30
39
|
## Frameworks
|
31
40
|
|
32
41
|
### Rails
|
33
42
|
|
34
|
-
Puma is the default server for Rails,
|
43
|
+
Puma is the default server for Rails, included in the generated Gemfile.
|
35
44
|
|
36
|
-
|
45
|
+
Start your server with the `rails` command:
|
37
46
|
|
38
47
|
```
|
39
|
-
$ rails
|
48
|
+
$ rails server
|
40
49
|
```
|
41
50
|
|
42
|
-
Many configuration options are not available when using `rails
|
51
|
+
Many configuration options and Puma features are not available when using `rails server`. It is recommended that you use Puma's executable instead:
|
43
52
|
|
44
53
|
```
|
45
54
|
$ bundle exec puma
|
@@ -53,16 +62,29 @@ You can run your Sinatra application with Puma from the command line like this:
|
|
53
62
|
$ ruby app.rb -s Puma
|
54
63
|
```
|
55
64
|
|
56
|
-
|
65
|
+
In order to actually configure Puma using a config file, like `puma.rb`, however, you need to use the `puma` executable. To do this, you must add a rackup file to your Sinatra app:
|
57
66
|
|
58
67
|
```ruby
|
59
|
-
|
60
|
-
|
68
|
+
# config.ru
|
69
|
+
require './app'
|
70
|
+
run Sinatra::Application
|
71
|
+
```
|
72
|
+
|
73
|
+
You can then start your application using:
|
74
|
+
|
75
|
+
```
|
76
|
+
$ bundle exec puma
|
61
77
|
```
|
62
78
|
|
63
79
|
## Configuration
|
64
80
|
|
65
|
-
Puma provides numerous options. Consult `puma -h` (or `puma --help`) for a full list of CLI options, or see [dsl.rb](https://github.com/puma/puma/blob/master/lib/puma/dsl.rb).
|
81
|
+
Puma provides numerous options. Consult `puma -h` (or `puma --help`) for a full list of CLI options, or see `Puma::DSL` or [dsl.rb](https://github.com/puma/puma/blob/master/lib/puma/dsl.rb).
|
82
|
+
|
83
|
+
You can also find several configuration examples as part of the
|
84
|
+
[test](https://github.com/puma/puma/tree/master/test/config) suite.
|
85
|
+
|
86
|
+
For debugging purposes, you can set the environment variable `PUMA_LOG_CONFIG` with a value
|
87
|
+
and the loaded configuration will be printed as part of the boot process.
|
66
88
|
|
67
89
|
### Thread Pool
|
68
90
|
|
@@ -72,9 +94,9 @@ Puma uses a thread pool. You can set the minimum and maximum number of threads t
|
|
72
94
|
$ puma -t 8:32
|
73
95
|
```
|
74
96
|
|
75
|
-
Puma will automatically scale the number of threads, from the minimum until it caps out at the maximum, based on how much traffic is present. The current default is `0:16`. Feel free to experiment, but be careful not to set the number of maximum threads to a large number, as you may exhaust resources on the system (or
|
97
|
+
Puma will automatically scale the number of threads, from the minimum until it caps out at the maximum, based on how much traffic is present. The current default is `0:16` and on MRI is `0:5`. Feel free to experiment, but be careful not to set the number of maximum threads to a large number, as you may exhaust resources on the system (or cause contention for the Global VM Lock, when using MRI).
|
76
98
|
|
77
|
-
Be aware that additionally Puma creates threads on its own for internal purposes (e.g. handling slow clients). So even if you specify -t 1:1, expect around 7 threads created in your application.
|
99
|
+
Be aware that additionally Puma creates threads on its own for internal purposes (e.g. handling slow clients). So, even if you specify -t 1:1, expect around 7 threads created in your application.
|
78
100
|
|
79
101
|
### Clustered mode
|
80
102
|
|
@@ -84,15 +106,23 @@ Puma also offers "clustered mode". Clustered mode `fork`s workers from a master
|
|
84
106
|
$ puma -t 8:32 -w 3
|
85
107
|
```
|
86
108
|
|
87
|
-
|
109
|
+
Or with the `WEB_CONCURRENCY` environment variable:
|
88
110
|
|
89
|
-
|
111
|
+
```
|
112
|
+
$ WEB_CONCURRENCY=3 puma -t 8:32
|
113
|
+
```
|
114
|
+
|
115
|
+
Note that threads are still used in clustered mode, and the `-t` thread flag setting is per worker, so `-w 2 -t 16:16` will spawn 32 threads in total, with 16 in each worker process.
|
116
|
+
|
117
|
+
In clustered mode, Puma can "preload" your application. This loads all the application code *prior* to forking. Preloading reduces total memory usage of your application via an operating system feature called [copy-on-write](https://en.wikipedia.org/wiki/Copy-on-write).
|
118
|
+
|
119
|
+
If the `WEB_CONCURRENCY` environment variable is set to a value > 1 (and `--prune-bundler` has not been specified), preloading will be enabled by default. Otherwise, you can use the `--preload` flag from the command line:
|
90
120
|
|
91
121
|
```
|
92
122
|
$ puma -w 3 --preload
|
93
123
|
```
|
94
124
|
|
95
|
-
|
125
|
+
Or, if you're using a configuration file, you can use the `preload_app!` method:
|
96
126
|
|
97
127
|
```ruby
|
98
128
|
# config/puma.rb
|
@@ -100,7 +130,9 @@ workers 3
|
|
100
130
|
preload_app!
|
101
131
|
```
|
102
132
|
|
103
|
-
|
133
|
+
Preloading can’t be used with phased restart, since phased restart kills and restarts workers one-by-one, and preloading copies the code of master into the workers.
|
134
|
+
|
135
|
+
When using clustered mode, you can specify a block in your configuration file that will be run on boot of each worker:
|
104
136
|
|
105
137
|
```ruby
|
106
138
|
# config/puma.rb
|
@@ -111,40 +143,52 @@ end
|
|
111
143
|
|
112
144
|
This code can be used to setup the process before booting the application, allowing
|
113
145
|
you to do some Puma-specific things that you don't want to embed in your application.
|
114
|
-
For instance, you could fire a log notification that a worker booted or send something to statsd.
|
115
|
-
This can be called multiple times.
|
146
|
+
For instance, you could fire a log notification that a worker booted or send something to statsd. This can be called multiple times.
|
116
147
|
|
117
|
-
|
148
|
+
Constants loaded by your application (such as `Rails`) will not be available in `on_worker_boot`
|
149
|
+
unless preloading is enabled.
|
150
|
+
|
151
|
+
You can also specify a block to be run before workers are forked, using `before_fork`:
|
118
152
|
|
119
153
|
```ruby
|
120
154
|
# config/puma.rb
|
121
|
-
|
122
|
-
|
123
|
-
ActiveRecord::Base.establish_connection
|
124
|
-
end
|
155
|
+
before_fork do
|
156
|
+
# configuration here
|
125
157
|
end
|
126
158
|
```
|
127
159
|
|
128
|
-
|
160
|
+
You can also specify a block to be run after puma is booted using `on_booted`:
|
129
161
|
|
130
162
|
```ruby
|
131
163
|
# config/puma.rb
|
132
|
-
|
164
|
+
on_booted do
|
133
165
|
# configuration here
|
134
166
|
end
|
135
167
|
```
|
136
168
|
|
137
|
-
|
169
|
+
### Error handling
|
170
|
+
|
171
|
+
If puma encounters an error outside of the context of your application, it will respond with a 500 and a simple
|
172
|
+
textual error message (see `Puma::Server#lowlevel_error` or [server.rb](https://github.com/puma/puma/blob/master/lib/puma/server.rb)).
|
173
|
+
You can specify custom behavior for this scenario. For example, you can report the error to your third-party
|
174
|
+
error-tracking service (in this example, [rollbar](https://rollbar.com)):
|
175
|
+
|
176
|
+
```ruby
|
177
|
+
lowlevel_error_handler do |e|
|
178
|
+
Rollbar.critical(e)
|
179
|
+
[500, {}, ["An error has occurred, and engineers have been informed. Please reload the page. If you continue to have problems, contact support@example.com\n"]]
|
180
|
+
end
|
181
|
+
```
|
138
182
|
|
139
183
|
### Binding TCP / Sockets
|
140
184
|
|
141
|
-
|
185
|
+
Bind Puma to a socket with the `-b` (or `--bind`) flag:
|
142
186
|
|
143
187
|
```
|
144
188
|
$ puma -b tcp://127.0.0.1:9292
|
145
189
|
```
|
146
190
|
|
147
|
-
|
191
|
+
To use a UNIX Socket instead of TCP:
|
148
192
|
|
149
193
|
```
|
150
194
|
$ puma -b unix:///var/run/puma.sock
|
@@ -157,30 +201,117 @@ $ puma -b 'unix:///var/run/puma.sock?umask=0111'
|
|
157
201
|
```
|
158
202
|
|
159
203
|
Need a bit of security? Use SSL sockets:
|
204
|
+
|
160
205
|
```
|
161
206
|
$ puma -b 'ssl://127.0.0.1:9292?key=path_to_key&cert=path_to_cert'
|
162
207
|
```
|
208
|
+
#### Self-signed SSL certificates (via the [`localhost`] gem, for development use):
|
209
|
+
|
210
|
+
Puma supports the [`localhost`] gem for self-signed certificates. This is particularly useful if you want to use Puma with SSL locally, and self-signed certificates will work for your use-case. Currently, the integration can only be used in MRI.
|
211
|
+
|
212
|
+
Puma automatically configures SSL when the [`localhost`] gem is loaded in a `development` environment:
|
213
|
+
|
214
|
+
```ruby
|
215
|
+
# Add the gem to your Gemfile
|
216
|
+
group(:development) do
|
217
|
+
gem 'localhost'
|
218
|
+
end
|
219
|
+
|
220
|
+
# And require it implicitly using bundler
|
221
|
+
require "bundler"
|
222
|
+
Bundler.require(:default, ENV["RACK_ENV"].to_sym)
|
223
|
+
|
224
|
+
# Alternatively, you can require the gem in config.ru:
|
225
|
+
require './app'
|
226
|
+
require 'localhost'
|
227
|
+
run Sinatra::Application
|
228
|
+
```
|
229
|
+
|
230
|
+
Additionally, Puma must be listening to an SSL socket:
|
231
|
+
|
232
|
+
```shell
|
233
|
+
$ puma -b 'ssl://localhost:9292' config.ru
|
234
|
+
|
235
|
+
# The following options allow you to reach Puma over HTTP as well:
|
236
|
+
$ puma -b ssl://localhost:9292 -b tcp://localhost:9393 config.ru
|
237
|
+
```
|
238
|
+
|
239
|
+
[`localhost`]: https://github.com/socketry/localhost
|
240
|
+
|
163
241
|
#### Controlling SSL Cipher Suites
|
164
|
-
|
165
|
-
|
242
|
+
|
243
|
+
To use or avoid specific SSL cipher suites, use `ssl_cipher_filter` or `ssl_cipher_list` options.
|
244
|
+
|
245
|
+
##### Ruby:
|
246
|
+
|
166
247
|
```
|
167
248
|
$ puma -b 'ssl://127.0.0.1:9292?key=path_to_key&cert=path_to_cert&ssl_cipher_filter=!aNULL:AES+SHA'
|
168
249
|
```
|
169
|
-
|
250
|
+
|
251
|
+
##### JRuby:
|
252
|
+
|
170
253
|
```
|
171
254
|
$ puma -b 'ssl://127.0.0.1:9292?keystore=path_to_keystore&keystore-pass=keystore_password&ssl_cipher_list=TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA'
|
172
255
|
```
|
173
|
-
|
256
|
+
|
257
|
+
See https://www.openssl.org/docs/man1.1.1/man1/ciphers.html for cipher filter format and full list of cipher suites.
|
258
|
+
|
259
|
+
Disable TLS v1 with the `no_tlsv1` option:
|
260
|
+
|
261
|
+
```
|
262
|
+
$ puma -b 'ssl://127.0.0.1:9292?key=path_to_key&cert=path_to_cert&no_tlsv1=true'
|
263
|
+
```
|
264
|
+
|
265
|
+
#### Controlling OpenSSL Verification Flags
|
266
|
+
|
267
|
+
To enable verification flags offered by OpenSSL, use `verification_flags` (not available for JRuby):
|
268
|
+
|
269
|
+
```
|
270
|
+
$ puma -b 'ssl://127.0.0.1:9292?key=path_to_key&cert=path_to_cert&verification_flags=PARTIAL_CHAIN'
|
271
|
+
```
|
272
|
+
|
273
|
+
You can also set multiple verification flags (by separating them with coma):
|
274
|
+
|
275
|
+
```
|
276
|
+
$ puma -b 'ssl://127.0.0.1:9292?key=path_to_key&cert=path_to_cert&verification_flags=PARTIAL_CHAIN,CRL_CHECK'
|
277
|
+
```
|
278
|
+
|
279
|
+
List of available flags: `USE_CHECK_TIME`, `CRL_CHECK`, `CRL_CHECK_ALL`, `IGNORE_CRITICAL`, `X509_STRICT`, `ALLOW_PROXY_CERTS`, `POLICY_CHECK`, `EXPLICIT_POLICY`, `INHIBIT_ANY`, `INHIBIT_MAP`, `NOTIFY_POLICY`, `EXTENDED_CRL_SUPPORT`, `USE_DELTAS`, `CHECK_SS_SIGNATURE`, `TRUSTED_FIRST`, `SUITEB_128_LOS_ONLY`, `SUITEB_192_LOS`, `SUITEB_128_LOS`, `PARTIAL_CHAIN`, `NO_ALT_CHAINS`, `NO_CHECK_TIME`
|
280
|
+
(see https://www.openssl.org/docs/manmaster/man3/X509_VERIFY_PARAM_set_hostflags.html#VERIFICATION-FLAGS).
|
281
|
+
|
282
|
+
#### Controlling OpenSSL Password Decryption
|
283
|
+
|
284
|
+
To enable runtime decryption of an encrypted SSL key (not available for JRuby), use `key_password_command`:
|
285
|
+
|
286
|
+
```
|
287
|
+
$ puma -b 'ssl://127.0.0.1:9292?key=path_to_key&cert=path_to_cert&key_password_command=/path/to/command.sh'
|
288
|
+
```
|
289
|
+
|
290
|
+
`key_password_command` must:
|
291
|
+
|
292
|
+
1. Be executable by Puma.
|
293
|
+
2. Print the decryption password to stdout.
|
294
|
+
|
295
|
+
For example:
|
296
|
+
|
297
|
+
```shell
|
298
|
+
#!/bin/sh
|
299
|
+
|
300
|
+
echo "this is my password"
|
301
|
+
```
|
302
|
+
|
303
|
+
`key_password_command` can be used with `key` or `key_pem`. If the key
|
304
|
+
is not encrypted, the executable will not be called.
|
174
305
|
|
175
306
|
### Control/Status Server
|
176
307
|
|
177
|
-
Puma has a built-in status
|
308
|
+
Puma has a built-in status and control app that can be used to query and control Puma.
|
178
309
|
|
179
310
|
```
|
180
311
|
$ puma --control-url tcp://127.0.0.1:9293 --control-token foo
|
181
312
|
```
|
182
313
|
|
183
|
-
Puma will start the control server on localhost port 9293. All requests to the control server will need to include `token=foo` as a query parameter. This allows for simple authentication. Check out [status.rb](https://github.com/puma/puma/blob/master/lib/puma/app/status.rb) to see what the app has available.
|
314
|
+
Puma will start the control server on localhost port 9293. All requests to the control server will need to include control token (in this case, `token=foo`) as a query parameter. This allows for simple authentication. Check out `Puma::App::Status` or [status.rb](https://github.com/puma/puma/blob/master/lib/puma/app/status.rb) to see what the status app has available.
|
184
315
|
|
185
316
|
You can also interact with the control server via `pumactl`. This command will restart Puma:
|
186
317
|
|
@@ -192,42 +323,49 @@ To see a list of `pumactl` options, use `pumactl --help`.
|
|
192
323
|
|
193
324
|
### Configuration File
|
194
325
|
|
195
|
-
You can also provide a configuration file
|
326
|
+
You can also provide a configuration file with the `-C` (or `--config`) flag:
|
196
327
|
|
197
328
|
```
|
198
329
|
$ puma -C /path/to/config
|
199
330
|
```
|
200
331
|
|
201
|
-
If no configuration file is specified, Puma will look for a configuration file at `config/puma.rb`. If an environment is specified
|
332
|
+
If no configuration file is specified, Puma will look for a configuration file at `config/puma.rb`. If an environment is specified (via the `--environment` flag or through the `APP_ENV`, `RACK_ENV`, or `RAILS_ENV` environment variables) Puma looks for a configuration file at `config/puma/<environment_name>.rb` and then falls back to `config/puma.rb`.
|
202
333
|
|
203
|
-
If you want to prevent Puma from looking for a configuration file in those locations,
|
334
|
+
If you want to prevent Puma from looking for a configuration file in those locations, include the `--no-config` flag:
|
204
335
|
|
205
336
|
```
|
337
|
+
$ puma --no-config
|
338
|
+
|
339
|
+
# or
|
340
|
+
|
206
341
|
$ puma -C "-"
|
207
342
|
```
|
208
343
|
|
209
|
-
|
344
|
+
The other side-effects of setting the environment are whether to show stack traces (in `development` or `test`), and setting RACK_ENV may potentially affect middleware looking for this value to change their behavior. The default puma RACK_ENV value is `development`. You can see all config default values in `Puma::Configuration#puma_default_options` or [configuration.rb](https://github.com/puma/puma/blob/61c6213fbab/lib/puma/configuration.rb#L182-L204).
|
345
|
+
|
346
|
+
Check out `Puma::DSL` or [dsl.rb](https://github.com/puma/puma/blob/master/lib/puma/dsl.rb) to see all available options.
|
210
347
|
|
211
348
|
## Restart
|
212
349
|
|
213
350
|
Puma includes the ability to restart itself. When available (MRI, Rubinius, JRuby), Puma performs a "hot restart". This is the same functionality available in *Unicorn* and *NGINX* which keep the server sockets open between restarts. This makes sure that no pending requests are dropped while the restart is taking place.
|
214
351
|
|
215
|
-
For more, see the [
|
352
|
+
For more, see the [Restart documentation](docs/restart.md).
|
216
353
|
|
217
354
|
## Signals
|
218
355
|
|
219
|
-
Puma responds to several signals. A detailed guide to using UNIX signals with Puma can be found in the [
|
356
|
+
Puma responds to several signals. A detailed guide to using UNIX signals with Puma can be found in the [Signals documentation](docs/signals.md).
|
220
357
|
|
221
358
|
## Platform Constraints
|
222
359
|
|
223
360
|
Some platforms do not support all Puma features.
|
224
361
|
|
225
362
|
* **JRuby**, **Windows**: server sockets are not seamless on restart, they must be closed and reopened. These platforms have no way to pass descriptors into a new process that is exposed to Ruby. Also, cluster mode is not supported due to a lack of fork(2).
|
226
|
-
* **Windows**:
|
363
|
+
* **Windows**: Cluster mode is not supported due to a lack of fork(2).
|
364
|
+
* **Kubernetes**: The way Kubernetes handles pod shutdowns interacts poorly with server processes implementing graceful shutdown, like Puma. See the [kubernetes section of the documentation](docs/kubernetes.md) for more details.
|
227
365
|
|
228
366
|
## Known Bugs
|
229
367
|
|
230
|
-
For MRI versions 2.2.7, 2.2.8, 2.2.9, 2.2.10 2.3.4 and 2.4.1, you may see ```stream closed in another thread (IOError)```. It may be caused by a [Ruby bug](https://bugs.ruby-lang.org/issues/13632). It can be fixed with the gem https://rubygems.org/gems/stopgap_13632:
|
368
|
+
For MRI versions 2.2.7, 2.2.8, 2.2.9, 2.2.10, 2.3.4 and 2.4.1, you may see ```stream closed in another thread (IOError)```. It may be caused by a [Ruby bug](https://bugs.ruby-lang.org/issues/13632). It can be fixed with the gem https://rubygems.org/gems/stopgap_13632:
|
231
369
|
|
232
370
|
```ruby
|
233
371
|
if %w(2.2.7 2.2.8 2.2.9 2.2.10 2.3.4 2.4.1).include? RUBY_VERSION
|
@@ -240,23 +378,37 @@ end
|
|
240
378
|
|
241
379
|
## Deployment
|
242
380
|
|
243
|
-
Puma has support for Capistrano with an [external gem](https://github.com/seuros/capistrano-puma).
|
381
|
+
* Puma has support for Capistrano with an [external gem](https://github.com/seuros/capistrano-puma).
|
244
382
|
|
245
|
-
|
246
|
-
provide continuous monitoring and restarts for increased
|
247
|
-
reliability in production environments:
|
383
|
+
* Additionally, Puma has support for built-in daemonization via the [puma-daemon](https://github.com/kigster/puma-daemon) ruby gem. The gem restores the `daemonize` option that was removed from Puma starting version 5, but only for MRI Ruby.
|
248
384
|
|
249
|
-
* [tools/jungle](https://github.com/puma/puma/tree/master/tools/jungle) for sysvinit (init.d) and upstart
|
250
|
-
* [docs/systemd](https://github.com/puma/puma/blob/master/docs/systemd.md)
|
251
385
|
|
252
|
-
|
386
|
+
It is common to use process monitors with Puma. Modern process monitors like systemd or rc.d
|
387
|
+
provide continuous monitoring and restarts for increased reliability in production environments:
|
253
388
|
|
254
|
-
|
389
|
+
* [rc.d](docs/jungle/rc.d/README.md)
|
390
|
+
* [systemd](docs/systemd.md)
|
255
391
|
|
256
|
-
|
257
|
-
|
258
|
-
|
259
|
-
|
392
|
+
Community guides:
|
393
|
+
|
394
|
+
* [Deploying Puma on OpenBSD using relayd and httpd](https://gist.github.com/anon987654321/4532cf8d6c59c1f43ec8973faa031103)
|
395
|
+
|
396
|
+
## Community Extensions
|
397
|
+
|
398
|
+
### Plugins
|
399
|
+
|
400
|
+
* [puma-metrics](https://github.com/harmjanblok/puma-metrics) — export Puma metrics to Prometheus
|
401
|
+
* [puma-plugin-statsd](https://github.com/yob/puma-plugin-statsd) — send Puma metrics to statsd
|
402
|
+
* [puma-plugin-systemd](https://github.com/sj26/puma-plugin-systemd) — deeper integration with systemd for notify, status and watchdog. Puma 5.1.0 integrated notify and watchdog, which probably conflicts with this plugin. Puma 6.1.0 added status support which obsoletes the plugin entirely.
|
403
|
+
* [puma-plugin-telemetry](https://github.com/babbel/puma-plugin-telemetry) - telemetry plugin for Puma offering various targets to publish
|
404
|
+
|
405
|
+
### Monitoring
|
406
|
+
|
407
|
+
* [puma-status](https://github.com/ylecuyer/puma-status) — Monitor CPU/Mem/Load of running puma instances from the CLI
|
408
|
+
|
409
|
+
## Contributing
|
410
|
+
|
411
|
+
Find details for contributing in the [contribution guide](CONTRIBUTING.md).
|
260
412
|
|
261
413
|
## License
|
262
414
|
|
data/bin/puma-wild
CHANGED
@@ -5,24 +5,18 @@
|
|
5
5
|
|
6
6
|
require 'rubygems'
|
7
7
|
|
8
|
-
|
8
|
+
cli_arg = ARGV.shift
|
9
9
|
|
10
10
|
inc = ""
|
11
11
|
|
12
|
-
if
|
12
|
+
if cli_arg == "-I"
|
13
13
|
inc = ARGV.shift
|
14
14
|
$LOAD_PATH.concat inc.split(":")
|
15
|
-
gems = ARGV.shift
|
16
|
-
end
|
17
|
-
|
18
|
-
gems.split(",").each do |s|
|
19
|
-
name, ver = s.split(":",2)
|
20
|
-
gem name, ver
|
21
15
|
end
|
22
16
|
|
23
17
|
module Puma; end
|
24
18
|
|
25
|
-
Puma.const_set(
|
19
|
+
Puma.const_set(:WILD_ARGS, ["-I", inc])
|
26
20
|
|
27
21
|
require 'puma/cli'
|
28
22
|
|
data/docs/architecture.md
CHANGED
@@ -2,35 +2,73 @@
|
|
2
2
|
|
3
3
|
## Overview
|
4
4
|
|
5
|
-
![
|
5
|
+
![https://bit.ly/2iJuFky](images/puma-general-arch.png)
|
6
6
|
|
7
|
-
Puma is a threaded
|
7
|
+
Puma is a threaded Ruby HTTP application server processing requests across a TCP
|
8
|
+
and/or UNIX socket.
|
8
9
|
|
9
|
-
Workers accept connections from the socket and a thread in the worker's thread pool processes the client's request.
|
10
10
|
|
11
|
-
|
11
|
+
Puma processes (there can be one or many) accept connections from the socket via
|
12
|
+
a thread (in the [`Reactor`](../lib/puma/reactor.rb) class). The connection,
|
13
|
+
once fully buffered and read, moves into the `todo` list, where an available
|
14
|
+
thread will pick it up (in the [`ThreadPool`](../lib/puma/thread_pool.rb)
|
15
|
+
class).
|
12
16
|
|
13
|
-
|
17
|
+
Puma works in two main modes: cluster and single. In single mode, only one Puma
|
18
|
+
process boots. In cluster mode, a `master` process is booted, which prepares
|
19
|
+
(and may boot) the application and then uses the `fork()` system call to create
|
20
|
+
one or more `child` processes. These `child` processes all listen to the same
|
21
|
+
socket. The `master` process does not listen to the socket or process requests -
|
22
|
+
its purpose is primarily to manage and listen for UNIX signals and possibly kill
|
23
|
+
or boot `child` processes.
|
14
24
|
|
15
|
-
|
25
|
+
We sometimes call `child` processes (or Puma processes in `single` mode)
|
26
|
+
_workers_, and we sometimes call the threads created by Puma's
|
27
|
+
[`ThreadPool`](../lib/puma/thread_pool.rb) _worker threads_.
|
28
|
+
|
29
|
+
## How Requests Work
|
30
|
+
|
31
|
+
![https://bit.ly/2zwzhEK](images/puma-connection-flow.png)
|
16
32
|
|
17
33
|
* Upon startup, Puma listens on a TCP or UNIX socket.
|
18
|
-
* The backlog of this socket is configured
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
* This
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
34
|
+
* The backlog of this socket is configured with a default of 1024, but the
|
35
|
+
actual backlog value is capped by the `net.core.somaxconn` sysctl value.
|
36
|
+
The backlog determines the size of the queue for unaccepted connections. If
|
37
|
+
the backlog is full, the operating system is not accepting new connections.
|
38
|
+
* This socket backlog is distinct from the `backlog` of work as reported by
|
39
|
+
`Puma.stats` or the control server. The backlog that `Puma.stats` refers to
|
40
|
+
represents the number of connections in the process' `todo` set waiting for
|
41
|
+
a thread from the [`ThreadPool`](../lib/puma/thread_pool.rb).
|
42
|
+
* By default, a single, separate thread (created by the
|
43
|
+
[`Reactor`](../lib/puma/reactor.rb) class) reads and buffers requests from the
|
44
|
+
socket.
|
45
|
+
* When at least one worker thread is available for work, the reactor thread
|
46
|
+
listens to the socket and accepts a request (if one is waiting).
|
47
|
+
* The reactor thread waits for the entire HTTP request to be received.
|
48
|
+
* Puma exposes the time spent waiting for the HTTP request body to be
|
49
|
+
received to the Rack app as `env['puma.request_body_wait']`
|
50
|
+
(milliseconds).
|
51
|
+
* Once fully buffered and received, the connection is pushed into the "todo"
|
52
|
+
set.
|
53
|
+
* Worker threads pop work off the "todo" set for processing.
|
54
|
+
* The worker thread processes the request via `call`ing the configured Rack
|
55
|
+
application. The Rack application generates the HTTP response.
|
56
|
+
* The worker thread writes the response to the connection. While Puma buffers
|
57
|
+
requests via a separate thread, it does not use a separate thread for
|
58
|
+
responses.
|
59
|
+
* Once done, the thread becomes available to process another connection in the
|
60
|
+
"todo" set.
|
61
|
+
|
62
|
+
### `queue_requests`
|
28
63
|
|
29
|
-
|
64
|
+
![https://bit.ly/2zxCJ1Z](images/puma-connection-flow-no-reactor.png)
|
30
65
|
|
31
|
-
|
66
|
+
The `queue_requests` option is `true` by default, enabling the separate reactor
|
67
|
+
thread used to buffer requests as described above.
|
32
68
|
|
33
|
-
|
69
|
+
If set to `false`, this buffer will not be used for connections while waiting
|
70
|
+
for the request to arrive.
|
34
71
|
|
35
|
-
|
36
|
-
|
72
|
+
In this mode, when a connection is accepted, it is added to the "todo" queue
|
73
|
+
immediately, and a worker will synchronously do any waiting necessary to read
|
74
|
+
the HTTP request from the socket.
|