#curl — Public Fediverse posts

Welcome zaveshaa as #curl commit author 1510: https://github.com/curl/curl/pull/22638

Download ten files in parallel from localhost using HTTP/1 over HTTPS, 10 times each - with #curl. Each file is 100MB. Limit the download speed to 5000KB/sec.

How much CPU is "good" to spend on this on a modern intel arch?

Perhaps a median of 2.73% of an i7-13700K core is okay?

https://curl.se/perf/#h1rate-cpu

(the tests run on my local machine, at that single 3.8 spike I probably did something else on the host)

When was there ever a better time to implement a Robin Hood hashset?

The #curl "easy" struct, the main data structure for handling a URL transfer, was ~5.1 KB in curl 8.21 and currently sits at ~3.4 KB.

We try to make good use of the RAM you are stuck with now.😌

https://curl.se/perf/#easy-handle

Me and @icing spotted #curl did one alloc more all of a sudden and together we chased it down and it should now be gone again.

Now eagerly waiting the next round of performance tests to update the graphs so that we can confirm our beliefs.

just another day in the #curl factory

Welcome Fred Klassen as #curl commit author 1509: https://github.com/curl/curl/pull/22631

Welcome Jayanth Vennamreddy as #curl commit author 1508: https://github.com/curl/curl/pull/20521

Because why wouldn't your Nibe geothermal heat pump run #curl?

(Thanks Jan Lundmark)

I've talked to several new #curl customers over the last few weeks who want back-ported security fixes for their older curl releases. To get them secured without having to do a full version upgrade.

Stay tuned for multiple patch releases coming soon for older curl version branches. Shipped under the rock-solid curl umbrella, for paying customers.

If YOU also need a security-fixed older curl release - let's talk!

Whether you are automating massive backups, syncing web directories, or just getting started with backend servers, there is a command-line client built just for your workflow🚀

The 12 best, actively maintained CLI tools to level up your terminal game!

Are you team #LFTP, team #curl, or do you stick to the classics?

👉 https://bit.ly/4gkWhcq

#Linux #WebDev #SysAdmin #LinuxCLI #FOSS

It's now 10 whole years since I tried to do my duty for the community and remove the #curl alias from PowerShell.

It's still there.

https://daniel.haxx.se/blog/2016/08/19/removing-the-powershell-curl-alias/

Two years ago now we made #curl -O pick the ultimate file name a little more clever:

https://daniel.haxx.se/blog/2024/08/19/a-filename-when-none-exists/

The vulnerability report frequency has gone down significantly for #curl in August compared to June. Is the avalanche already dying down? It is too early to tell for sure - maybe it's just a glitch in the matrix.

It's only a year ago since my "AI slop attacks on the #curl project" talk at #froscon.

So much has changed since then...

https://daniel.haxx.se/blog/2025/08/18/ai-slop-attacks-on-the-curl-project/

RE: https://univention.social/@smeyer/117115282961451386

This looks like a fun #curl talk for the German speaking crowd.

Der #froscon Vortrag zu #curl von Christoph Stoettner ist sehr interessant! Ich wusste nicht, dass das Ding sooo viel kann. (Ich bin eine von denen, die bisher telnet nachinstalliert haben. 😄)

https://programm.froscon.org/froscon2026/talk/86a97c61-8362-40af-9934-821d04f08ccd/

#freesoftware #opensource #freiesoftware #Sysadmin

Welcome to the second release candidate for #curl 8.22.0. Available now from https://curl.se/rc/

@m23hauke Hater würden sagen, dass #Curl auch ein Client ist 😉. Was mir noch in den Sinn kommt: Falls man 2FA aktiviert hat, dann unbedingt in den #Nextcloud Einstellungen ein App-Passwort generieren. Ansonsten schlägt die Authentifizierung fehl. Super Video!

Nextcloud: Dateien hoch-/runterladen (ohne Client)

https://tube.tchncs.de/w/mEzbnhTdKS7KA5jKyUASqm

Seems #curl 's new rate-limiting works so well, we are having trouble finding a good test to track cpu usage baseline in our perf charts.😎

RE: https://mathstodon.xyz/@xameer/117109806096502871

#curl escaped its sandbox.😌

#Froscon ; Vorträge. die ich besucht habe:
#curl: Mehr als HTTP
Protokollübergreifendes Troubleshooting von Stöps

Es ist schon erstaunlich was curl alles ersetzen kann. Paar Features hab ich schon gekannt.
Sehr gut erklärt. 👍 👍 👍 😃
https://media.ccc.de/v/froscon2026-3540-curl_mehr_als_http

Give the team a graph and things happen.

#curl now allocates less than 130,000 bytes memory to download a HTTP file of any size.

102,400 bytes of that chunk is the download buffer. curl has *never* allocated less non-download buffer memory for this use case.

All it takes is attention to detail, a sensible architecture and lots of dedication.

I made a PR for #curl that saves a few operations and bytes, but…

you can use a curl handle now only for ~500,000 years continuously…

So, I‘m not sure. Should we document this?

Then again, the timestamps in QUIC (ngtcp2) only work for 500 years. Maybe it‘s fine?

Decisions, decisions…

https://github.com/curl/curl/pull/22584

@biou @hackaday I know relatively few humans who send requests to non existing pages on Web servers.

Except maybe #cURL devs 😅

#curl performance

https://daniel.haxx.se/blog/2026/08/14/curl-performance-2/

Welcome Thomas Chauchefoin as #curl commit author 1506: https://github.com/curl/curl/pull/22576

How do I get a list of all CVEs that an unpatched #curl 8.11.1 is known to have?

curl https://curl.se/docs/vuln-8.11.1.json | jq '.[].aliases[0]'

When it became clear that performance tracking of #curl involved creating graphs, @bagder
implemented it in a couple of days.

(Mostly jesting here, but good things are only ever created by people who enjoy what they are doing, I find.)

If you miss measurements that seem vital to your #curl use, let us know!

https://curl.se/perf/