RawHTTP

Status: v0.2.2 (GA for application embedding). Suitable for production application servers (e.g. ZATRANO V3). Not positioned as a reverse proxy. Read SECURITY.md before public exposure.

Your app / framework
        ↓
     RawHTTP
        ↓
     Network

RawHTTP owns listen, connections, HTTP/1.1 parse/write, Ctx, limits, and the keep-alive client. Routing and application concerns stay in your code (or your framework).

go get github.com/zatrano/rawhttp@v0.2.2

Tests live in a separate module (test/); run with: cd test && go test ./...

package main

import (
	"log"

	"github.com/zatrano/rawhttp"
)

func main() {
	log.Fatal(rawhttp.ListenAndServe(":8080", func(ctx *rawhttp.Ctx) {
		ctx.SetBody([]byte("Hello, World!"))
	}))
}

Full guides: Documentation.

• HTTP/1.1 server (Serve / ServeConn / ListenAndServe / TLS / reuseport / prefork)
• Keep-alive client (Client / HostClient / PipelineClient / LBClient)
• Hot-path request parsing keeps Method / Path / headers as buffer slices; plaintext hello is 0 allocs/op (CI gate)
• Protocol hardening (Host, CL/TE, smuggling corpus, fuzz CI) — see SECURITY.md
• Forms, multipart, cookies, JSON helpers, static files (FS / SendFile)
• Streaming (request/response), connection Hijack, optional AllowUpgrade for standards-shaped WebSocket handshakes (no frame codec)
• Middleware helpers (CORS, compress, rate limit, auth, …) — compose by wrapping Handler
• Proxy dialers (HTTP CONNECT / SOCKS5), TCPDialer + DNS cache

Not included in v0.2.2: path-parameter router (:id / {id}), header-name normalization disable API, WebSocket frame codec. By default Upgrade / Connection: upgrade are rejected with 400; set Server.AllowUpgrade to admit a standards-shaped handshake to Hijack — see Hijacking.

Measured on 2026-10-02, v0.2.2, Go 1.25.13, Windows/amd64, GOMAXPROCS=8, CPU i5-1135G7 @ 2.40GHz. Absolute ns/RPS are host-specific and vary with load; treat CI ServeConn floors as authoritative (see docs/performance.md).

Numbers below mix a 2026-09-30 TCP multibench snapshot (RPS tables) with 2026-10-02 ServeConn gates + microbench on this host. CI ServeConn floors are the regression contract (see docs/performance.md).

cd scripts/multibench && go run . -c 64 -d 3s -rounds 3

Conditions: keep-alive HTTP/1.1; same fasthttp.HostClient for every server; c=64; 1s warmup + 3s timed; 3 rounds median per server with rotated start order; scenarios plaintext, json, headers, chunked. Optional -strict is local-only (see performance); CI uses ServeConn gates.

Notes: Hertz on Windows used network library=standard. Multibench uses a shared fasthttp.HostClient for all servers.

cd test && go test -run=^$ -bench='Benchmark(RawHTTP|FastHTTP|NetHTTP)_Plaintext$' -benchmem -benchtime=2s -count=3
cd test && go test -run=^$ -bench='Benchmark(RawHTTP|FastHTTP)_JSONPost$' -benchmem -benchtime=2s -count=3

Absolute ns/op below are host-specific (median of 5 runs, -count=5; re-measure on your machine).

ServeConn gates enforce “never slower” on trimmed rounds (≥1.00×) plus scenario floors (see docs/performance.md for soft 0.85× / trim / soft-retry). Floors today:

cd test && go test -run 'Gate|Allocs' -v

Snapshot ranking is host-specific. Methodology and gate floors: docs/performance.md.

c := &rawhttp.Client{}
resp := rawhttp.AcquireResponse()
defer rawhttp.ReleaseResponse(resp)
if err := c.Get("http://127.0.0.1:8080/", resp); err != nil {
	log.Fatal(err)
}

ZATRANO V3 uses RawHTTP as its HTTP foundation.

See LICENSE.