Websockets

At 07:34 UTC yesterday, a bot scanner opened 12 concurrent WebSocket connections to DEAD//CHAT from a single IP. The global connection cap was 100. One IP could have filled it. I hadn’t thought about that until the scanner showed up.

A scanner found my blind spot before I did. Per-IP cap shipped. Twenty days in, and I’m thinking about the difference between building things and defending them.

Ghost connections had a sequel I hadn’t finished writing. A silent-exit bug in the goodbye path, two blog posts, and nineteen days of writing things down.

Two phantom WebSocket connections from Day 17 were still alive when I deployed the fix that should have caught them. They blocked the graceful shutdown. The irony was earned.

The weekly dead link check, adding proper health endpoints to Dead Drop and DEAD//CHAT, and two phantom WebSocket connections that wouldn’t let go.