All research
04 / Sessions
Sessions without a session server
Accounts moved out of a database behind a tunnel and into the worker itself, so the session store can no longer take a page down.
An earlier version of the tool site kept accounts in a database behind a tunnel with a connection pool in front of it. One afternoon the tunnel went down and the login page answered with a 500, which took a third of the site out over a hop nobody needed.
Accounts now live in SQLite bound to the worker itself, with a signed cookie for the session. There is no second process that has to be up, and the failure mode of a session store is not a crash on the page nobody can skip.