部落格
技術實踐
來自 Yeap Cloud 團隊的工程故事、產品更新與實用指南。
PHP2Shell (CVE-2026-109618/109619): How We Virtual-Patched It at the Edge
Two critical PHP advisories allow unauthenticated RCE through an OOM bailout and stale global state. Here is how the bugs work, what Yeap WAF blocks at the edge on day one, and what you still need to fix on your origin.
Yeap CDN's new edge: why we chose Rust
We replaced our CDN edge with a new in-house version built in Rust on Pingora. Here is what it means for your site: faster connections, configuration that applies in seconds, and stronger isolation and security.
TLS Session Resumption and HTTP/3 on the Edge
Session resumption lets returning visitors skip a full TLS handshake. Why ticket keys have to survive restarts, how we rotate them safely, and how HTTP/3 on our edge reuses the same request pipeline.
How Our DNS Picks Nameservers for Your Zone
Every zone hosted on Yeap DNS gets a pair of nameservers. That pair has to be stable, spread out, and actually able to answer. How our hash-based allocation works, and why "status is intent, heartbeat is fact".