Giter Club home page Giter Club logo

roxxy's Introduction

Roxxy: A distributed HTTP and websockets reverse proxy

Roxxy is a distributed HTTP/websockets reverse proxy backed by Redis inspired by planb and hipache

Features

  • Load-Balancing

  • Dead Backend Detection

  • Dynamic Configuration

  • WebSocket

  • TLS

Install

The easiest way to install Roxxy Proxy is to pull the build from the Github Container Registry and launch it in the container:

# run Redis

docker run -d -p 6379:6379 redis

# run Roxxy
docker run -d --net=host ghcr.io/aaqaishtyaq/roxxy --listen ":80"

VHOST Configuration

The configuration is managed by Redis that makes possible to update the configuration dynamically and gracefully while the server is running, and have that state shared across workers and even across instances.

Let's take an example to proxify requests to 2 backends for the hostname www.aaqa.dev. The 2 backends IP are 10.10.0.2 and 10.10.0.3 and they serve the HTTP traffic on the port 80.

redis-cli is the standard client tool to talk to Redis from the terminal.

Follow these steps:

Create the frontend

$ redis-cli rpush frontend:www.aaqa.dev mywebsite
(integer) 1

The frontend identifer is mywebsite, it could be anything.

Add the 2 backends

$ redis-cli rpush frontend:www.aaqa.dev http://10.10.0.2:80
(integer) 2
$ redis-cli rpush frontend:www.aaqa.dev http://10.10.0.3:80
(integer) 3

Review the configuration

$ redis-cli lrange frontend:www.aaqa.dev 0 -1
1) "mywebsite"
2) "http://10.10.0.2:80"
3) "http://10.10.0.3:80"

TLS Configuration using redis (optional)

redis-cli -x hmset tls:www.aaqa.dev certificate < server.crt
redis-cli -x hmset tls:www.aaqa.dev key < server.key

redis-cli -x hmset tls:*.tsuru.com certificate < wildcard.crt
redis-cli -x hmset tls:*.tsuru.io key < wildcard.key

TLS Configuration using FS (optional)

create directory following this structure

cd certficates
ls
*.domain-wildcard.com.key
*.domain-wildcard.com.crt
absolute-domain.key
absolute-domain.crt

While the server is running, any of these steps can be re-run without messing up with the traffic.

Start-up flags

The following flags are available for configuring Roxxy on start-up:

Flag Description
--listen value, -l value Address to listen.

(default: "0.0.0.0:8989")
-tls-listen value Address to listen with tls.
--tls-preset value Preset containing supported TLS versions and cyphers, according
to https://wiki.mozilla.org/Security/Server_Side_TLS. Possible
--metrics-address value Address to expose Prometheus.

(default: "/metrics")
--load-certificates-from value Path where certificate will found. If value equals 'redis'
certificate will be loaded from redis service.

(default: "redis")
--read-redis-network value Redis address network, possible values are "tcp" for TCP
connection and "unix" for connecting using unix sockets.

(default: "tcp")
--read-redis-host value Redis host address for tcp connections or socket path
for UNIX sockets.

(default: "127.0.0.1")
--read-redis-port value Redis port

(default: 6379)
--read-redis-sentinel-addrs value Comma separated list of redis sentinel addresses.
--read-redis-sentinel-name value Redis sentinel name
--read-redis-password value Redis password
--read-redis-db value Redis database number

(default: 0)
--write-redis-network value Redis address network, possible values are "tcp" for TCP
connection and "unix" for connecting using unix sockets

(default: "tcp")
--write-redis-host value Redis host address for tcp connections or socket path
for UNIX sockets

(default: "127.0.0.1")
--write-redis-port value Redis port

(default: 6379)
--write-redis-sentinel-addrs value Comma separated list of redis sentinel addresses
--write-redis-sentinel-name value Redis sentinel name
--write-redis-password value Redis password
--write-redis-db value Redis database number (default: 0)
--access-log value File path where access log will be written. If value
equals 'syslog' log will be sent to local syslog.
The value 'none' can be used to disable access logs.

(default: "./access.log")
--request-timeout value Total backend request timeout in seconds

(default: 30)
--dial-timeout value Dial backend request timeout in seconds

(default: 10)
--client-read-timeout value Maximum duration for reading the entire request,
including the body

(default: 0s)
--client-read-header-timeout value Amount of time allowed to read request headers

(default: 0s)
--client-write-timeout value Maximum duration before timing out writes of the response

(default: 0s)
--client-idle-timeout value Maximum amount of time to wait for the next request
when keep-alives are enabled.

(default: 0s)
--dead-backend-time value Time in seconds a backend will remain disabled after a
network failure.

(default: 30)
--flush-interval value Time in milliseconds to flush the proxied request

(default: 10)
--request-id-header value Header to enable message tracking
--active-healthcheck Enable active healthcheck on dead backends once
they are marked as dead. Enabling this flag will
result in dead backends only being enabled again
once the active healthcheck routine is able to
reach them.
--backend-cache Enable caching backend results for 2 seconds.
This may cause temporary inconsistencies.
--help, -h show help
--version, -v print the version

roxxy's People

Contributors

aaqaishtyaq avatar dependabot[bot] avatar

Stargazers

 avatar

Watchers

 avatar  avatar  avatar  avatar  avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.