Why we built an OAuth2 server in C++ — and benchmarked it against Keycloak, Ory, and Zitadel
· 阅读需 11 分钟
Every identity server you can self-host today is a process: a JVM, a Go binary, a Node app. None of them is a library. That gap is where Fulla starts — and it's also why we ended up writing an OAuth2/OIDC server in C++17 and benchmarking it, on identical hardware, against Keycloak, Ory Hydra, and Zitadel.
This post covers four things: why the embeddable niche matters (§1), how we made a four-product comparison as fair as we could — including two findings that forced us to withdraw claims rather than publish them (§2), the numbers with their explicit limits (§3), and what the benchmarking process taught us beyond rankings (§4). Everything here is reproducible from the repository.