netgoat reverse proxy – "seriously messed up code"
from dont@lemmy.world to selfhosted@lemmy.world on 17 Mar 08:27
https://lemmy.world/post/44367069

🤣 sure, I’ll use a reverse proxy / waf that has a release change log “I don’t remember lol” (Yes, it’s in alpha, but still…)

Is anyone here using it? Are you scared?

Screenshot of github release page linked above. Under "Changes" it says "I don't remember lol" and under Warning it says "This is seriously messed up code"

#selfhosted

threaded - newest

Andrew@mnstdn.monster on 17 Mar 09:28 next collapse

I avoid any software with emojis throughout the readme... Screams vibe coded! And for a reverse proxy?? 😂

jj4211@lemmy.world on 17 Mar 10:56 collapse

Well, vibe coding should be roughly able to do a reverse proxy, there’s just so many out there for it to rip off.

Vibe coders love generating stuff that already exists for no reason, because it sometimes can kind of work.

hendrik@palaver.p3x.de on 17 Mar 09:33 next collapse

After a few “Delete junk” commits, “Broken”, “PATCH: Hope this fixes it”, and “Basic Reverse-Proxy”, it’s now at version 1.0.1-alpha.1.
Don’t know what they did to Git. But their “minor commit” touches almost the entire code in their repo. Rest of it (and the general confusion and the edgy commit messages) look to me like something done by OpenClaw.

100% wouldn’t use it.

x00z@lemmy.world on 17 Mar 12:09 collapse

It was a “minor commit” because it was only a minor prompt.

AllNewTypeFace@leminal.space on 17 Mar 09:59 next collapse

Vibe coding, the crystal meth of software

warmaster@lemmy.world on 17 Mar 10:33 collapse

More like bath salts

savvywolf@pawb.social on 17 Mar 11:29 collapse

Is this an allegedly “high performance” reverse proxy written in NodeJS? Uh… Yeah, good luck with that.

Also, how do they intend to protect against DDos attacks in a self-hosted environment with (presumably) a limited number of devices?

dont@lemmy.world on 17 Mar 12:04 collapse

To be fair, the proxy engine is supposedly written in go, not in nodejs, but yeah, the ddos defense most likely is wishful thinking…

jj4211@lemmy.world on 17 Mar 14:59 collapse

Of course I also see that the go spawns python and does stuff with that…

And there’s lots of other dubious issues that look like an odd mismash of intro level programming stuff with unfortunate performance implications, and a very strong vibe code smell, though the commit interval is a bit larger than I would have presumed with vibe coding, but the volume of changes seem AI sloppy…

Well, broadly it looks like slop, probably AI slop, but either way I wouldn’t go anywhere near this project…