Skip to content

Commit 3fa3f19

Browse files
committed
more doc tweaks.
1 parent aff32bf commit 3fa3f19

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,16 +13,16 @@ network level).
1313
For global TLS session ticket key rotation, we require an external mechanism (could
1414
be in a dedicated NGINX or OpenResty server itself, however) to feed
1515
the TLS session ticket keys for each hour in Memcached servers or Memcached-compatible
16-
servers (like Kyoto Tycoon). Each NGINX or OpenResty server node simply queries the
16+
servers (like Kyoto Tycoon). Each NGINX or OpenResty server node automatically queries the
1717
Memcached server(s) with a key containing the timestamp every hour. It has the following
1818
advantages:
1919

20-
1. We keep a list of keys and only evict the oldest key every hour, which allows
20+
1. We keep a list of keys inside the nginx server and only evict the oldest key every hour, which allows
2121
gradual phase-out of old keys.
2222
1. The keys are updated automatically for all the virtual (SSL) servers defined in the `nginx.conf` file.
2323
1. No NGINX server reload or restart is needed. New keys are pulled from Memcached or
2424
Memcached-compatible servers automatically every hour.
25-
1. All network I/O is 100% nonblocking, that is, it never blocks any OS threads nor the nginx event loop.
25+
1. All network I/O is 100% nonblocking, that is, it never blocks any OS threads nor the nginx event loop, even on shm cache misses.
2626
1. All the core logic is in pure Lua, which is every easy to hack and adjust for special requirements.
2727
1. Uses shm cache for the keys so that only one worker needs to query the Memcached or
2828
Memcached-compatible servers.

0 commit comments

Comments
 (0)