https://certstream.dev/blog/ Engineering write-ups from building a Certificate Transparency streaming server in Rust. en Tue, 25 Aug 2026 20:43:46 +0000 https://certstream.dev/blog/http2-multiplexing-vs-per-connection-rate-limits.html https://certstream.dev/blog/http2-multiplexing-vs-per-connection-rate-limits.html Tue, 25 Aug 2026 09:00:00 +0000 Six CT logs were falling behind. HTTP/2 multiplexes every request onto one connection, so we pinned the operator to HTTP/1.1 and got three connections instead of one. Throughput did not move: 49.0 vs 50.0 entries a second. The real limit was 29 entries returned for a 1024-entry request. https://certstream.dev/blog/ct-logs-tiles-without-checkpoint.html https://certstream.dev/blog/ct-logs-tiles-without-checkpoint.html Tue, 25 Aug 2026 09:00:00 +0000 Three CT logs were falling 279,000 entries behind with zero errors. They serve static-ct-api tiles but return 404 for /checkpoint. Reading them with the tree size from get-sth, and the three failures that only appeared against live logs. https://certstream.dev/blog/jemalloc-transparent-huge-pages-rss.html https://certstream.dev/blog/jemalloc-transparent-huge-pages-rss.html Tue, 25 Aug 2026 09:00:00 +0000 A Rust service looked like it was leaking: 358 MB resident against a 52 MB live heap. Transparent huge pages were holding 206 MB jemalloc could not return, and the fix was five settings the allocator had been running without.