← clixhouse.com
System Architecture

The Stack

x86-64 assembly. Zero dependencies. Sub-millisecond responses. Every byte is intentional.

100svh
72KB binary
Layer 01

Network

Raw TCP sockets via Linux syscalls. No libc. Poll-based multiplexing with fork-per-connection for isolation. TLS 1.3 handshake in assembly.

ComponentSpec
TCP serverpoll() + fork-per-conn
TLS1.3, X25519 + AES-GCM-256
HTTP1.1 + 2 (HPACK, Huffman)
DNSBuilt-in resolver
ProxySNI-routing, 8 cert slots
Layer 02

Application

Request parsing, response building, routing, sessions, cookies, query strings, multipart forms. Template engine with loops, conditionals, and auto-escaping.

FeatureImplementation
RouterPrefix-match, O(n) scan
TemplatesVars, loops, escaping, i18n
Sessions256-bit IDs, cookie-based
AuthPBKDF2-SHA256, 100k rounds
Static filesETag, gzip, range requests
Layer 03

Crypto

Every algorithm from scratch. No OpenSSL. No libsodium. Constant-time operations throughout.

PrimitiveStandard
HashSHA-256, SHA-512
MACHMAC, Poly1305
AEADAES-GCM, ChaCha20-Poly1305
Key exchangeX25519, P-256
SignaturesEd25519
KDFHKDF, PBKDF2
Architecture

Multi-Process

Every client runs in its own process. One crashing can't take down another. 11 systemd units on a single VPS.

TLS terminator
Frontdoor
:80 + :443, Host-header routing, SNI multi-cert
:9000
Site
clixhouse.com
:9001
Clothing
E-commerce
:9002-9009
8 Huts
Client sites
72KB
Binary size
<1ms
Response time
0
Dependencies
11
Processes
26
Projects shipped
Process

How We Ship

01
You describe it
No pitch decks. No discovery phases. Tell us what you need — we listen, then we build.
02
We build it
First draft in 48 hours. Real code, real URLs. Not mockups — a working site.
03
You refine it
Iterate until it's right. No revision limits. No change order forms.
04
We deploy it
Push to production. TLS, DNS, monitoring — all handled. You focus on your business.