What is QSCS?
On this page 6 sections
QSCS sits on a public-facing port on your server and accepts HTTP requests on behalf of one or more origins (the actual web servers behind it). For each request, QSCS either serves a cached response, or talks to the origin, caches the answer, and returns it. Every node in a cluster shares cache state with every other node over a single encrypted port, so the same answer is available everywhere within milliseconds.
The interesting parts of that simple description are:
1. Resilience: cache that survives outages
When an upstream starts failing, QSCS does not return 502
errors. It enters HEADLESS mode for that origin and
keeps serving the most recent good version of every page it has cached.
Clients see the site continue working, just slightly stale. The cluster
has two independent layers of HEADLESS protection: master-to-origin and
thin-to-master (see HEADLESS Mode).
2. Security: one encrypted port for everything
Most distributed systems require you to expose several ports per node:
one for public traffic, one for replication, one for the admin/RPC
channel, one for the metrics scraper. Each is its own attack surface
and a separate firewall rule. QSCS exposes one port
per node. Public requests, peer replication, control-plane sync, and
license validation all share a single TLS-encrypted ingress. The
Prometheus-style metrics endpoint is loopback-only and answers
only on 127.0.0.1, so it cannot be scraped from
the outside even if you forgot to add a firewall rule. The result is
a much smaller attack surface than a hand-assembled cache + queue +
replication-channel stack.
3. Lower latency, globally
A QSCS deployment can be a single node, or many nodes that all serve the same set of origins. In a multi-node setup one node is the master; the others are thin clients that proxy to the master and hold an independent local cache. Thin clients placed in regions close to your users answer requests over short network paths, typical round-trips drop to single-digit milliseconds for cached content. Only cache misses traverse the long link to the master, even then it is only the binary difference between the cache and the response not the full page, and once a miss is resolved the answer is held locally for everyone in that region and replicated across the cluster using deltas. The ledger is mathematically synchronised and cryptographically verifiable.
4. Less complexity for distributed apps
Building a globally distributed web application traditionally requires a stack of moving parts: a CDN, a session store, a primary/replica database, a queue for cross-region writes, and orchestration to keep them in sync. QSCS replaces the cache-and-replication parts of that stack with a single binary. No quorum service, no shared database, no message broker, no replication scripts. Joining a cluster is one command; the daemon receives its peer list, its role, and its origins from the control plane automatically. You write your application as if it lived on a single host.
5. Self-configuring
Once a node is licensed and pointed at a control plane, joining a cluster is a single command. The node receives its peer list, the cluster's origins, and its role automatically. There is no per-node configuration drift to manage, no hand-edited config files to keep in sync.
What QSCS is not
- Not a CDN of last resort, QSCS is software you run on your own hosts.
- Not a load balancer, it picks one upstream per origin.
- Not a WAF, it does not inspect application payloads for attacks.
- Not a database, its cache is in-memory and on-disk, but transient.
If you wanted any of those, you can still put QSCS behind them or in front of them. QSCS is happy as one link in a longer chain.