DNS* (RFC1035, 1987)
. [a-m] root-server
net [a-m] gtld-server
spdf ns1.he.net. / ns0.1984.is.
A @
Name: spdf.net.
Address: 46.226.46.226
A www
NXDOMAIN
CAA (RFC8659, 2019)
DNSSEC
DoT* (RFC7858, 2016)
DoH (RFC8484, 2018)
UDP (RFC768, 1980)
DHCP
DNS
LLMNR
mDNS
NTP*
[QUIC]*
RIP
SNMP
VxLAN
TCP (RFC793, 1981)
DROP 80
LISTEN 443
LISTEN 12345
LISTEN 46226
SYN / SYN-SENT
SYN-ACK / SYN-RCVD
ACK / ESTABLISHED
ESTABLISHED
TCB
ordered data transfer
reliability
sequence number
checksums
packet reordering
packet loss
time-based retransmission
timestamps
SACK
flow control
sliding window scaling
congestion control
[AQM] (RFC2309, 1998)
BBR* (WiP draft)
CUBIC (RFC8312, 2018)
ECN (RFC3168, 2001)
FQ-CoDel (RFC8290, 2018)
PRR (RFC6937, 2013)
[RED]
IPv4 (RFC791, 1981 + RFC894, 1984)
protocol (RFC5237, 2008 - RFC2780, 2000)
[0x01 ICMP] (RFC 792, 1981)
0x04 IP-in-IP (RFC2003, 1996)
0x06 TCP
0x08 EGP (RFC 904, 1984)
0x11 UDP
0x29 IPv6*
0x2F GRE (RFC2784, 2000 - RFC1701, 1994)
0x32 AH (RFC4302, 2005 - RFC2402, 1998)
0x33 ESP (RFC4303, 2005 - RFC2406, 1998)
0x70 VRRP (RFC5798, 2010 - RFC3768, 2004)
gateway
ISP / Network carrier
IANA (RFC3232 2002 - RFC1700, 1994)
RIPE NCC 046/8
inetnum: 46.226.46.224 - 46.226.46.232
netname: SPDF
origin: AS15699
route: 46.226.46.0/24
[IPv6]* (RFC2473, 1998)
IxP
ASN adjacency (RFC1930, 1996)
AS0174 Cogent
AS2914 NTT
AS6939 HE
AS8220 Colt
Peering
CATNIX / Equinix BA1
ESPANIX / Interxion MAD
DE-CIX Madrid
Routing
EGP
BGP-4 (RFC4271, 2006 - RFC1105, 1989)
Locations
Sertram
Adam Barcelona
IEEE 802
MAC EUI-48
STP 802.1d
LLC 802.2
Ethernet (II) 802.3
100 BASE-TX 802.3u
1000BASE-T 802.3ab
10G BASE-T 802.3an
25G BASE-CR 802.3by
40G BASE-CR4 802.3ba
100GBASE-CR10 802.3bj
EtherTypes
0x0800 IPv4
0x0806 ARP (RFC826, 1982 + RFC903, 1984)
0x8100 VLAN (802.1q)
0x86DD IPv6*
0x8808 Flow control (many)
0x8870 Jumbo frames*
0x88A8 Aggregation (802.3ad, MLAG 802.1ax)
0x88CC LLDP (802.1ab)
fw
bios
mbr
multi-stage boot loader
LILO
[coreboot]
OpenBMC
OVMF
SeaBIOS
TianoCore
uefi
SEC
PEI
DXE
BDS
CSM
TSL
esp
shim / preloader (secure boot)
grub2
modules
blscfg
kernel
initramfs / initrd
microcode
init
SysV
runlevel
Upstart
systemd
target
microprocessors
OoO ILP SMT
NUMA SMP / MMU-IMC
Intel x86-64 ISA
AES SSE4 SIMD, I/OAT & DDIO, VT-x / VT-d PI
Broadwell-EP uArch
QPI / dual-ring / 4ch
Skylake-SP
AVX-512 / UPI / mesh / 6ch
Ice Lake SP
monolithic 40c / 8ch / 64L PCIe4 / TME
Sapphire Rapids [Max]
IoD / SdS
4x 15c tile <-> EMIB
[1:1 8H-HBM2e [DDR-less]]
DDR5 / 80x PCIe5 / CXL1.1*
[AMX] / DLB / DSA / [IAA] / [QAT]
Emerald Rapids
2x 32c tile / CXL1.1
[Sierra Forest]
?x E-c CC / 2x IOC / 8ch DDR5 / 136L PCIe5-CXL2
Granite Rapids
?x P-c CC / 12ch DDR5
[Granite Rapids-D]
?
AMD amd64
SME SEV AMD-v AMD-Vi
Naples
Rome
9x die MCM SoC, single domain unified topology
IFv2 <-> 8x CCD (2x quad core CCX)
Quad I/O die: octa-channel PHY, 128L PCIe4
Milan[-X]
Unified 8c CCX / AVX-512 / SEV-ES + SNP / CET
[V-Cache]
Genoa
12x CCX / 12ch DDR5 / 2x 32Gbps SerDes: IFv3-PCIe5-CXL1.1*
Bergamo
8x Zen4c CCD (2x octa-core CCX)
Siena (SP6)
1P / 4x Zen4c CCD / 6ch DDR5 / 96L PCIe5 - 48L CXL
Turin
SDRAM
burst length
channel(s)
clock
[side-band ECC]*
timings
refresh
width
layout
rank(s)
die stack(s)
banks
row
column / page
word
types
DDR
load-reduced / buffered
[MCR]
registered
[TSV 3DS]
GDDR
HBM
LPDDR
[NVDIMM]
[N]
[P]
SSD
controller
caching
front-layer (pSLC)
folding (TLC)
channels / banks
ECC
form factor
FTL-LBA-PBA
GC
HMB
interface
OP
protocol
trim
wear-leveling
endurance
DWPD TBW P/E
V-NAND TSOP multi-die packages
deck(s) / stacks / layers
logic
CuA / CoP / PuC
data
planes
2 / 4
blocks (erase)
16 / 24 / 48 / 96 MiB
pages (write)
4 / 8 / 16 / 64 KiB
+checksum
strings
cells
[SLC] MLC TLC QLC PLC
HDD
actuator(s)
[TSA]
BLDC / rotational speed
geometry
heads
platters
recording
PMR / TDMR
[H-]SMR (zoned)
device / drive
host
EAMR (ePMR) / *-MAMR / HAMR
sectors
512e / 4kn
tracks / cylinders
TPI / BPI
helium seal
interface
LBA
[OptiNAND]
protocol
Software-defined storage
availability domains
erasure coding
load balancing
[locality]*
hyperconvergence
read caching
scrubbing
thin replication
tiering
write journaling
distributed block store
Ceph RBD
drbd9 3-way
GlusterFS
LINSTOR
MooseFS
SeaweedFS
[distributed fs]*
[CephFS]
CloudStore
Quantcast
elmerfs
Frangipani
HDFS
MooseFS
LizardFS
PFS
SeaweedFS
object
Manta
RADOS
S3 REST compatible
[Ceph RadosGW]
LeoFS
[MinIO]
[NooBaa]
OpenIO-SDS
Riak CS
SeaweedFS
Swift
IaaS
private
AHV
[OpenStack]
Virtuozzo
vSphere
public
CPI
hybrid
Host OS
bare-metal VMM / hypervisor
KVM
kernel module
SeaBIOS
ballooning
device drivers
emulated hw
hotplug
ioctl
migration
vfio
vhost
sVirt
userspace
Cloud Hypervisor
crosvm
kata
rust-vmm
libvirt
[libkrun]
qemu
virtual machine
guest OS image
virtio
IaC / IaD / IaT / SCM
Ansible
Chef
cloud-init
cloud-config / user-data
CoreOS
Butane
Ignition
Cincinnati / Zincati
fleetlock
rpm-ostree
[Dagger]
Flatcar?
ct
FLUO
Nebraska
Torcx
footloose?
Helm
Tiller
Juju
k3OS
kured*
kustomize
MAAS
Matchbox
MicroOS
Pulumi
Puppet
Salt*
Talos*
CAPI
osctl
Sidero
tanka*
[Terraform] / OpenTofu
[cdk]*
providers
[Active Directory]
cloudinit
consul
[Dell Redfish]*
external
helm
[HPE GreenLake / OneView]*
http
ignition
Kubernetes* (control plane and KubeVirt only)
libvirt
local
MAAS
null
random
shell
template (built-in)
time
tls
Vault
Zitadel
Tinkerbell
Linux
bkl
blk
bcache
dm
cache
crypt
LUKS2
XTS
integrity
lvm2
lockd
raid* (md)
mpio
raid
[sflc]
stripe
[thin]
verity
[vdo]
zoned
md
mq
prio
[bpf]
[eBPF]
cmdline
apparmor
init_on_alloc
init_on_free
iommu
lockdown
[mce]
mds
[net.ifnames]
[nordrand]
nosmt
[oops]
page_poison
pti
randomize_kstack_offset
slub_debug
slub_nomerge
vsyscall
dbus
fs
AIO / DIO / [uring]
fscache*
fuse
jbd2
netfs
notify
overlay
quota
stat
xattr
vfs
buffered, epoll, multiplexing
cache
buffer
block
inode
dentry
directory
file
page
fd
locks
mount
sync / fsync / fdatasync
inetd / xinetd
kernfs
kexec
kpatch
lxc
mm
dma
edac
hugepages
transparent
kfree
kmalloc
ksm
madvise
mlock
mmap
numa
oom
_kill
_reaper
shm
slab
slub
poisoning
redzoning
sanity checks
sparsemem
swap
tlb
vmalloc
zram
[zswap]
net
ethtool
netfilter
conntrack
iptables
x_tables
lvs
IPVS
seesaw
NAT (RCF1631, 1994)
DNAT + SNAT
[STUN + TURN + ICE]
nftables
netlink
rtnetlink
netpoll
NAPI
ovs
skb
net_dev
netif
ip_rcv
tcp_rcv
strp
rcu
sched
clock
quantum
interrupt
async
coalescing/moderation
exception
abort
fault
trap
irq
affinity
hotplug*
masking
pm
timer-based
pelt
psi
rr
[rt]
security*
aslr
brk
exec
heap randomization
kaslr
stack
vdso
cet
ibt
ss
cgroups (v2)
controllers
cpu / cpuset
eBPF*
dev / net
freezer
criu
io
memory / hugetlb
perf
pid
chroot
ibpb
ibrs
kasan
kbpti
kTLS
lsm
avc
capabilities
[landlock]
mac
SELinux
context labeling
targeted policies
confinement
[yama]
namespaces
cgroup / IPC / mnt / net / PID / time / UID / UTS
PTE inversion
retpoline, rsb filling
seccomp
smap
ssbd
stibp
UKI
stalld
stdio
sudo
systemd
boot
coredump
journald
networkd
notify
nspawn
oomd
resolved
timesyncd
udevd
time
trace
wireguard
POSIX (partial, 1996 edition - IEEE Std 1003.1-1988)
acl
C api (glibc)
ipc
messages
pipes
rpc
semaphores
signals
sockets
pthreads
atomic
partitioning
fork
safety
deadlock
membarrier
mutex
futex
race condition
spinlock
syncing
cond vars
shared memory
pointer passing
syscalls
dac
portability
regex
shell
cli
env
exit status
std streams
LSB (Linux Foundation - 5.0 spec, 2015 - 1.0 spec, 2001)
elf
fhs
pseudo vfs
dev
proc
run
sys
debug
tracing
tmp
libc
rpm
OS
[KataOS]
seL4
Linux
Alpine
[postmarketOS]
[AOSP]
Android-x86
LineageOS
Arch
[SteamOS]
SystemRescue
Clear
Debian
Devuan
[Kali]
Knoppix
Tails
Ubuntu
openSUSE
Fedora
fcos
Red Hat
Aliyun
Alma
Amazon
CentOS
Stream
CloudLinux
Oracle
Rocky
Gentoo
Chromium OS
ChromeOS
COS
[LFS]
~CBL-Mariner
Slackware
Mac
[Redox]
UNIX
[Windows]
[Server]
Filesystems
[Bcachefs]
[btrfs]*
ext4
block groups
checksum
superblock
block bitmap
inode bitmap
inode table
mode, owner, size, timestamps, gid, counts, flags
block maps / extent trees
direct / indirect
checksum
special inodes
defective blocks
journal, optionally external and checksummed
quotas
extensions / features:
bigalloc, dir_index, ext_attr, flex_bg, has_journal, inline_data, meta_bg,
metadata_csum, sparse_super(v2), ...
multi-block allocator
[f2fs]
OpenZFS
[xfs]
allocation groups
dump / restore
log device, separate
reorganizer, [online defrag]
repair, [online]
[reverse space mapping]* (experimental)
deduplication
scrubbing, [online]
snapshots
CoW
reflinks
online read-only mount
shrinking!
stripe unit
variable
block size
extent length
Distributed systems (replicated state machines)
bft (blockchain)
consensus
PoC
[PoDA]
[PoR]
PoRep + PoSt
[PoS]*
PoW*
[AuxPoW]*
features
[DeApps]
domain names
[DeFi]
[DID]
[fungible tokens]
[L2]*
[NFT]*
[oracle(s)]
[runtime vm]
[smart contracts]
[Web3]
ZK
Babble
[Concord]
Ecash / B-money / Bit gold / Hashcash / RPOW
BTC
NMC / MSC / SYS / BCH / LN
ETH*
[ETC]
USDT / USDC
SOL
FIL
BURST / AR / [XCH]
Hyperledger Fabric
Ouroboros
[ADA]
PPC
QRK / DASH / XZC
ZEC / XMR / XVG / [ZEN] / RVN
Snow
Substrate?
[DOT]
Tendermint
Cosmos
Akash?
ATOM?
BNB / LUNA
enebrix / LTC / DOGE / DGB
TON?
XRP
[XLM]
strong consistency (byzantine-intolerant fault-tolerant [sic])
paxos* (any variant)
Borg
Cassandra (LWT [sic])
Grakn
Ceph
Chubby
Bigtable
Doozerd
FoundationDB*
Frangipani
Neo4j
Riak KV
ScyllaDB (LWT [sic])
Spanner
XtreemFS
rrraft
distributed consensus
heartbeats
persistence
replicated append-only immutable WAL
state machine safety
store snapshots
leader
followers member list
log replication
confirmation
apply state (committed)
failure flow
reelection
randomized timeout
candidate
majority
quorum met
consistency sync
index term log-matching
replay
state restored
implementations
ArangoDB
braft
brpc
[DAOS]
Dqlite
etcd
Cloud Foundry
kube-vip
Kubernetes
[OpenStack]
Patroni
PD
TiDB
Rook
Sensu Go
Stolon
Vault
Vitess
Vulcand
go-raft
SeaweedFS
hashicorp/raft[-*]
Consul (server side, consistent mode)
Dkron
Juju
Liftbridge
NATS Streaming
[Nomad]
rqlite
Vault
Hazelcast (CP)
InfluxDB v2
IPFS
KRaft
Kudu
LizardFS
LogCabin
RAMCloud
MongoDB
Nexus
[NuRaft]
OpenNebula
Qdrant
Ra
RabbitMQ QQ
RedisRaft
RethinkDB
SwarmKit
Docker
Tarantool
Typesense
async-raft
tokio
[terminus]
[Little Raft]
[ChiselStore]
multi-group (hash sharding)
CockroachDB
Dgraph
DocDB
Dragonboat
NATS JetStream
Nebula
raft-rs
TiKV
Ratis
IoTDB
Ozone
Redpanda
[ScyllaDB]
[parallel]?
PFS
best-effort/causal/eventual/lazy/weak consistency
CRDT
AntidoteDB
IPFS
LWW
Riak
Roshi
Redis
Venice
DHT / gossip
Aerospike
Couchbase
CouchDB
Dynamo
Cassandra
Riak
Elasticsearch (ZenDiscovery)
GlusterFS
Hazelcast
Dat / hypercore
Kademlia
Ethereum
Gnutella
Kad
libp2p
Mainline
KeyDB
Rapid
Redis Sentinel
ScyllaDB
SWIM
memberlist
Alertmanager
Cortex
Loki
[MetalLB L2/ARP]
Mimir
PureLB
Serf
[Consul] (default/stale read mode)
Ambassador
confd
Consul-Terraform-Sync
ContainerPilot
Mimir
Traefik
Vault
[Nomad]
ring
Totem
Corosync
Pacemaker
PAF
Proxmox
Linux-HA
Heartbeat
ldirectord
Piranha
UCARP
Viewstamped
revisited
[TigerBeetle]?
VRRP
Keepalived
ZAB
ZooKeeper
ActiveMQ
BookKeeper
Pulsar
ClickHouse
Contrail
Druid
HBase
GeoMesa
Impala
Janus
OpenTSDB
Phoenix
Helix
Ignite
LogScale
Marathon
Mesos
Sensei
Container orchestration
Docker Swarm
Docker Engine
dockerd
containerd
shim
runC (libcontainer)
proxy
gRPC
moby
BuildKit
libnetwork (CNM)
OpenAPI
multi-node
manager consensus
overlay ingress
load balancing
routing mesh
rolling updates
secrets
service discovery
stack (compose)
Kubernetes
distributions (self-hosted)
bootkube
Canonical
Cisco
k3s*
k3d
k8e
vcluster
Karbon
kubeadm
preflight
kubelet
pull
[generate] & upload
certs / config
control plane
datastore
[static pod(s)]
[self-managed HA API]*
token
bootstrap / csr / join
cert-rotation
upgrade
implementations
Deckhouse
kind
KubeKey
KubeSphere
Kubespray
kURL
minikube
Kubic
Lokomotive?
Magnum
Mirantis
k0s* (airgapped)
OpenShift
Rancher
cattle
hyperkube
[NeuVector]?
RKE2
Tanzu
Typhoon
Zarf?
extend
Cluster API
KubeVirt
MaaS
[nested]
[OpenStack]
Sidero
Tinkerbell
meta
CRD / KRM
metacontroller
mutating webhook
operator
observe
police
scan
test
patterns
batch / grid / hpc / shm
[Volcano]*
build / CI / pipeline / workflow
CD / event-driven / scheduled / sub
distributed* / mesh / multi-cluster / multi-version
[edge]* / embedded / IoT / NFV* / p2p
fault-tolerant / load-balanced / self-healing / shared-nothing*
HTTP WS
API: gRPC - OAS - [REST[ful]] - ... / CDN* / TLS-SNI / [WebRTC] / wss - [wt]
in-memory / message / pub / queue / RPC / service-oriented / transient
[persistent] / [transactional]*
rtc
your old app
CNI
libcni
ADD / CHECK / DEL
mode
plugins
ipam
whereabouts
macvlan
meta
LB
kube-vip
MetalLB
OpenELB
PureLB
[multus]
portmap
sbr
policies / rules
drop all / least privilege
implementations
BGP
Calico*
kube-router*
DPDK
Geneve
ambient
GRE
IPIP
IPsec
IPVS
MPLS
Tungsten Fabric
OvS
antrea
*-OVN-*
weave
SR-IOV
VPP
VxLAN
wg
Calico*
cilium
flannel*
[SMI]
implementations
[Cilium]*
[Istio]*
kuma
[Linkerd]
[NSM]?
OSM
[Traefik]
CRI
gRPC / protobuf
implementations
containerd
cri-dockerd
cri-o
dockershim
frakti
pouch
Container runtime (OCI runtime-spec)
monitor
conmon[-rs]
runtime
apptainer
crun
lxd
railcar
rkt
runC
[youki]
sandbox/virtual
[ACRN]
clear
rust-vmm
Dragonball
kata
Firecracker
Ignite
runnc
runV
runsc
gVisor
Container image (OCI image-spec)
Containerfile(s)
build
from [scratch]
multi-stage
stateless / templated
ephemeral [intermediate] container(s)
image layer(s) / stages
[encrypt]
ocicrypt
bundle
final image
[single self-contained binary]
config
annotations
[healthcheck]
hostname
hooks
linux-specific
mount(s)
process
root
sign
cosign
push (OCI distribution-spec)
skopeo
CSI
implementations
BeeGFS
ChubaoFS
Curve
Diamanti
Infinidat
IOMesh
Lightbits
LINSTOR
Longhorn
Ondat / StorageOS
OpenEBS?
cStor
Portworx / stork
REX-Ray
Rook
[SPDK]
StorPool
Trident
COSI
MinIO
[NooBaa]
Rook
Pod
container(s)
cgroups (v2) limits
[command / ENTRYPOINT]
[args / CMD]
[env]
[ephemeral]
namespaces
[host]*
shared
net
pause container
restricted / sandboxed
minimal capabilities
rootless / fakeroot
requests
[volume mount(s)]
bind (Docker)
links (Docker)
[tmpfs(s)]
[port(s)]
[probes]
volume(s)
overlay
base underlying image
thin layer
[force ro]
[ephemeral]
[projected]
[persistent] (CSI)
implementations
libpod
podman
desktop
Data stores (databases)
document (JSON)
ArangoDB
Couchbase
CouchDB
Lucene
CrateDB
Meilisearch
MongoDB
RethinkDB
ScyllaDB (DynamoDB Alternator)
Tantivy
Typesense
YugabyteDB
graph
key-value
ArangoDB
[Dgraph]
Grakn
Janus
memgraph?
[Nebula]
Neo4j
[RageDB]
Redis
RDF triple store
OrientDB
[TerminusDB]
Virtuoso
in-memory
Aerospike
[cachegrand]
[Dragonfly]
Memcached
Redis
Ardb
[KeyDB]
Tarantool
key-value
BadgerDB
Dkron
FluxCD
immudb
Jaeger
Pyroscope
bbolt
Consul
InfluxDB v2
NATS
SeaweedFS
Berkeley DB
[LMDB]
Dynamo
etcd
ForestDB
[FoundationDB]
[mvSQLite]
[sqld]
LevelDB
Bitcoin
Chromium* ungoogled
FileStore
Riak
RocketMQ
RocksDB
ArangoDB
ceph-mon
ceph-osd
DocDB
Kafka
MyRocks
[Pebble]
Qdrant
Rocksplicator
[TerarkDB]
TiKV
[SurrealDB]
Titan
SeaweedFS
LMDB
PerconaFT
[Skytable]*
[sled]*
Sophia
WiredTiger
relational
row
[SQL Server]
SQLite
rqlite
TiDB
YugabyteDB
column
Cassandra
ClickHouse
[DuckDB]
HBase
Hypertable
ScyllaDB
YugabyteDB
multidimensional
Tera
sharded
stream / queue
ActiveMQ
Kafka
NATS
JetStream
NSQ
Pravega
Pulsar
RabbitMQ
Redis
[Redpanda]
ts
[cachegrand]
InfluxDB v2
InfluxDB v3?
Kdb+
MongoDB
[Prometheus]
Cortex
Mimir
Thanos
RRDtool
Cacti
collectd
Ganglia
MRTG
Munin
Nagios
OpenNMS
Riak TS
[VictoriaMetrics]
Whisper
Graphite
Metrictank
vector
Milvus
Qdrant
Weaviate
TLS 1.2 (RFC5246, 2008 - TLS 1.0 RFC2246, 1999)
TLS 1.3 (RFC8446, 2018)
ClientHello ServerHello
X.509 PKI certificate [authentication]
ISRG Root X1
Root X2 (ECC)
Let's Encrypt E1
spdf.net P-384/SHA384
USERTrust (ECC)
ZeroSSL (ECC)
46.226.46.226 P-384/SHA384
TLS12 | TLS13
Key exchange ECDHE
Algorithm type ECDSA
Supported groups x25519, x448, secp384r1
Extensions ALPN | NPN
TLS13 cipher suites
CHACHA20-POLY1305 / AES-256-GCM
TLS12 suites (AEAD only)
CHACHA20-POLY1305 / AES256-GCM / AES256-CCM
ClientKeyExchange
PFS ephemeral key
0-RTT / early data
Certificate Transparency (RFC6962)
embedded logs
[Cloudflare] / [DigiCert] / [Google]
[Let's Encrypt] / [Sectigo (Comodo)] / [TrustAsia]
[ECH]
OCSP (must-staple, RFC7633)
HTTP/1.1 (RFC2068, 1999 - HTTP 1.0 RFC1945, 1996)
HTTP/2 (RFC7540, 2015)
binary (h2)
compression
brotli (RFC7932, 2016)
HPACK (RFC7541, 2015)
Server Push (RFC8030)
[HTTP/3]* (RFC9114, 2022)
[QUIC] (RFC9000, 2021)
QPACK (RFC9204, 2022)
[WebSocket] (WHATWG Living Standard - [RFC9220, 2022]* - RFC8441, 2018 - RFC6455, 2011)
[WebTransport] (WiP draft)
Compilers
[GCC 13]
optimizations
gold linker*
link-time
native tuned instruction set
[pgo]*
even more
yet more
protections
control-flow
fortify
heap areas
no-execute bit / DEP
no rpath / runpath
no symbols
pointer obfuscation
position-independent
code
execution
read-only relocations (full)
sections
stack
all
canary
clash mitigation
strip-all
unitialized
warn all/extra
zero'ing used registers
sanitizers
address
concurrency
leak
thread
undefined
LLVM 17
Carbon
Clang C*
Emscripten
[OpenCL]
[OpenMP]
[Go]*
Rust
[WebAssembly]
[Zig]
WAF (nginX*)
headers
cache
cookies
Cross-Origin
CORS
EP / OP / RP
CSP
Expect-CT
[HPKP] (deprecated)
HSTS (preloaded)
Permissions-Policy (missing disable all and sane defaults)
XSS
modules
compile time
modsecurity
inbound & outbound
OWASP crs
OpenSSL 3.1
dynamic
brotli (dynamic)
nginx-ct (broken)
CSS ([CSS3]* - W3C CSS 2.1, 2011 - CSS level 1, 1996)
HTML (WHATWG Living Standard - W3C HTML5, 2014 - RFC1866, 1995)
XML
XHTML
Encoding
ASCII (RFC 20, 1969)
Unicode (ISO/IEC 10646, 1993)
UTF-8 (RFC2044, 1996)
[UTF-16] (RFC2781, 2000)
vcs
cvs
git
mercurial
svn
[TFVC]
CI / pipeline
[trigger]
source(s)
pinned
shallow
dependencies
audit
[licensing]
Apache / BSD / [BSL] / CC* / [A]GPL* / MIT / [WTFPL]
scan
[linting]
static analysis
artifact(s)
build
test (lots)
sign
release
tag
distribute