In the upcoming releases, we'll extend this area of functionality to handle
more use cases in the most performant manner.
Unfortunately, basic proxying support did not make it to this release, as
tests have revealed that it needs more work. There are excellent chances
that the feature will be included in the next release in a month or so.
2. Application Isolation
This capability increases the security of running applications, allowing to
run them in isolated environments based on Linux namespaces. This is very
similar to how Docker containers work.
The configuration is pretty straightforward: you can customize the isolation
level and configure UID/GID mapping between the host and the container:
This feature was implemented by Tiago de Bem Natel de Moura, who has joined
our team recently; he will continue working on security features hardening
and container support of Unit.
3. WebSockets in Java Servlet Containers
WebSocket connection offloading was first introduced in the previous release
for Node.js only; now it's extended to JSC as well. We will continue
advancing application language support further to provide equally broad
opportunities, whichever language you may prefer.
Changes with Unit 1.11.0 19 Sep 2019
*) Feature: basic support for serving static files.
*) Feature: isolation of application processes with Linux namespaces.
*) Feature: built-in WebSocket server implementation for Java Servlet
*) Feature: direct addressing of API configuration options containing
slashes "/" using URI encoding (%2F).
*) Bugfix: segmentation fault might have occurred in Go applications
under high load.
*) Bugfix: WebSocket support was broken if Unit was built with some
linkers other than GNU ld (e.g. gold or LLD).
That's all for this release.
Try, test, leave feedback, and stay tuned!