Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
clusterflock
Advanced tools
clusterflock is a simple clustering HTTP server for Node. It accepts a single request handler and a hash of options. The goal of clusterflock is to eliminate my own repeated need for a simple clustering server that implements graceful worker shutdown and re-forking of dead workers.
This package is deprecated. I wrote a much more well-tested version without the known bugs of clusterflock called teamster.
$ npm install clusterflock --save
By default, clusterflock will fork the number of workers equal to os.cpus().length
. When it receives a SIGINT
or SIGTERM
signal, it will begin attempting to shut down gracefully by ceasing to receive requests and closing all servers after existing requests have been completed.
The simplest use case of clusterflock is to pass it a single request handler function:
var clusterflock = require('clusterflock');
clusterflock(function (req, res) {
res.end('ok');
});
Since clusterflock essentially just calls http.createServer
in the worker process, anything that can be normally passed to that function can be passed to the clusterflock
main function, including express apps:
var clusterflock = require('clusterflock'),
express = require('express'),
app = express();
app.use(express.bodyParser()); // &c.
clusterflock(app);
When a worker disconnects, the master checks the value of its suicide
attribute. If that value is true, master does nothing. If that value is not true (i.e. the worker died/was killed unintentionally), the master forks a new worker.
The clusterflock
function accepts an options object:
var clusterflock = require('clusterflock'),
app = require('./lib/app');
clusterflock(app, {
numWorkers: 1,
port : 3000,
timeout : 5000
});
Name | Type(s) | Default | Description |
---|---|---|---|
numWorkers | Number | os.cpus().length | number of worker processes to fork |
port | Number , String | process.env.PORT || 5000 | port the workers will listen on |
timeout | Number | 1000 | amount of time after receiving a graceful shutdown signal that the master will immediately kill workers |
clusterflock responds to signals. heroku, for example, sends SIGTERM
to stop and restart dynos, which will cause clusterflock to initiate a graceful shutdown. SIGINT
, on the other hand, will force clusterflock to shut down immediately.
Signal | Behavior |
---|---|
SIGTTIN | Fork an additonal worker |
SIGTTOU | Disconnect the least-recently forked worker |
SIGINT | Kill master process (and therefore workers) immediately. |
SIGTERM | Forward myself SIGQUIT . |
SIGQUIT | Attempt a graceful shutdown (stop serving requests, serve remaining requests, and shut down). |
To run the tests:
$ npm test
git checkout -b my-clusterflock
)git commit -am "add unicorns"
)git push origin my-clusterflock
)The photo in this readme is by Flickr user Eugene Zemlyanskiy. It has a CC BY 2.0 license.
FAQs
a clustering http server for node
We found that clusterflock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.