perf: upgrade to Go 1.26 and optimize static-web server config

- Bump go.mod and Dockerfile builder image to Go 1.26 (golang:1.26-alpine)
- Bump runtime image to alpine:3.23
- Add DisableGeneralOptionsHandler to http.Server (both HTTP and HTTPS)
  to avoid unnecessary OPTIONS processing overhead
- Tighten default timeouts: ReadTimeout/WriteTimeout 30s→10s,
  IdleTimeout 120s→75s (matches nginx keepalive_timeout)
- Set GOGC=400 in benchmark container to reduce GC pressure after
  warmup when the in-memory cache is fully populated
- Update config_test.go to reflect new default timeouts

Author: jkyberneees

benchmark/Dockerfile.static-web

@@ -1,7 +1,7 @@
 # Multi-stage build: compile static-web then run in a minimal image
 # ----------------------------------------------------------------
 # Stage 1 — build
-FROM golang:1.23-alpine AS builder
+FROM golang:1.26-alpine AS builder
 
 WORKDIR /src
 COPY go.mod go.sum ./
@@ -12,7 +12,7 @@ RUN go build -ldflags="-s -w" -o /bin/static-web ./cmd/static-web
 
 # ----------------------------------------------------------------
 # Stage 2 — run
-FROM alpine:3.20
+FROM alpine:3.23
 
 RUN adduser -D -u 1000 static-web
 COPY --from=builder /bin/static-web /usr/local/bin/static-web

benchmark/docker-compose.benchmark.yml

@@ -26,6 +26,11 @@ services:
     environment:
       - SW_ROOT=/public
       - SW_ADDR=0.0.0.0:8080
+      # Raise the GC target ratio — after warmup the cache is fully populated
+      # and allocation rate is very low, so running GC less often is a win.
+      - GOGC=400
+      # Ensure Go uses all available CPUs (explicit, matches container quota).
+      - GOMAXPROCS=0
     restart: unless-stopped
 
   # -------------------------------------------------------------------------

go.mod

@@ -1,6 +1,6 @@
 module github.com/static-web/server
 
-go 1.23
+go 1.26
 
 require (
 	github.com/BurntSushi/toml v1.6.0

internal/config/config.go

@@ -134,9 +134,9 @@ func applyDefaults(cfg *Config) {
 	cfg.Server.Addr = ":8080"
 	cfg.Server.TLSAddr = ":8443"
 	cfg.Server.ReadHeaderTimeout = 5 * time.Second
-	cfg.Server.ReadTimeout = 30 * time.Second
-	cfg.Server.WriteTimeout = 30 * time.Second
-	cfg.Server.IdleTimeout = 120 * time.Second
+	cfg.Server.ReadTimeout = 10 * time.Second
+	cfg.Server.WriteTimeout = 10 * time.Second
+	cfg.Server.IdleTimeout = 75 * time.Second
 	cfg.Server.ShutdownTimeout = 15 * time.Second
 
 	cfg.Files.Root = "./public"

internal/config/config_test.go

@@ -21,8 +21,8 @@ func TestLoadDefaults(t *testing.T) {
 	if cfg.Server.ReadHeaderTimeout != 5*time.Second {
 		t.Errorf("Server.ReadHeaderTimeout = %v, want 5s", cfg.Server.ReadHeaderTimeout)
 	}
-	if cfg.Server.ReadTimeout != 30*time.Second {
-		t.Errorf("Server.ReadTimeout = %v, want 30s", cfg.Server.ReadTimeout)
+	if cfg.Server.ReadTimeout != 10*time.Second {
+		t.Errorf("Server.ReadTimeout = %v, want 10s", cfg.Server.ReadTimeout)
 	}
 	if cfg.Files.Root != "./public" {
 		t.Errorf("Files.Root = %q, want %q", cfg.Files.Root, "./public")
@@ -89,8 +89,8 @@ csp = "default-src 'none'"
 		t.Errorf("Security.CSP = %q, want 'default-src none'", cfg.Security.CSP)
 	}
 	// Unset fields should still have defaults
-	if cfg.Server.WriteTimeout != 30*time.Second {
-		t.Errorf("Server.WriteTimeout = %v, want 30s (default)", cfg.Server.WriteTimeout)
+	if cfg.Server.WriteTimeout != 10*time.Second {
+		t.Errorf("Server.WriteTimeout = %v, want 10s (default)", cfg.Server.WriteTimeout)
 	}
 }
 

internal/server/server.go

@@ -48,13 +48,14 @@ func New(cfg *config.ServerConfig, secCfg *config.SecurityConfig, handler http.H
 	}
 
 	s.http = &http.Server{
-		Addr:              cfg.Addr,
-		Handler:           httpHandler,
-		ReadHeaderTimeout: cfg.ReadHeaderTimeout,
-		ReadTimeout:       cfg.ReadTimeout,
-		WriteTimeout:      cfg.WriteTimeout,
-		IdleTimeout:       cfg.IdleTimeout,
-		MaxHeaderBytes:    8 * 1024,
+		Addr:                         cfg.Addr,
+		Handler:                      httpHandler,
+		ReadHeaderTimeout:            cfg.ReadHeaderTimeout,
+		ReadTimeout:                  cfg.ReadTimeout,
+		WriteTimeout:                 cfg.WriteTimeout,
+		IdleTimeout:                  cfg.IdleTimeout,
+		MaxHeaderBytes:               8 * 1024,
+		DisableGeneralOptionsHandler: true,
 	}
 
 	if cfg.TLSCert != "" && cfg.TLSKey != "" {
@@ -90,14 +91,15 @@ func New(cfg *config.ServerConfig, secCfg *config.SecurityConfig, handler http.H
 		}
 
 		s.https = &http.Server{
-			Addr:              cfg.TLSAddr,
-			Handler:           httpsHandler,
-			TLSConfig:         tlsCfg,
-			ReadHeaderTimeout: cfg.ReadHeaderTimeout,
-			ReadTimeout:       cfg.ReadTimeout,
-			WriteTimeout:      cfg.WriteTimeout,
-			IdleTimeout:       cfg.IdleTimeout,
-			MaxHeaderBytes:    8 * 1024,
+			Addr:                         cfg.TLSAddr,
+			Handler:                      httpsHandler,
+			TLSConfig:                    tlsCfg,
+			ReadHeaderTimeout:            cfg.ReadHeaderTimeout,
+			ReadTimeout:                  cfg.ReadTimeout,
+			WriteTimeout:                 cfg.WriteTimeout,
+			IdleTimeout:                  cfg.IdleTimeout,
+			MaxHeaderBytes:               8 * 1024,
+			DisableGeneralOptionsHandler: true,
 		}
 	}