{"id":13416244,"url":"https://github.com/tpbowden/swarm-ingress-router","last_synced_at":"2026-01-14T22:53:06.718Z","repository":{"id":57593043,"uuid":"62557641","full_name":"tpbowden/swarm-ingress-router","owner":"tpbowden","description":"Route DNS names to Swarm services based on labels","archived":true,"fork":false,"pushed_at":"2018-08-19T00:00:22.000Z","size":2853,"stargazers_count":164,"open_issues_count":5,"forks_count":22,"subscribers_count":13,"default_branch":"master","last_synced_at":"2024-07-31T21:55:42.154Z","etag":null,"topics":["docker","swarm"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tpbowden.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-07-04T11:37:29.000Z","updated_at":"2024-02-26T20:47:37.000Z","dependencies_parsed_at":"2022-09-26T19:43:33.942Z","dependency_job_id":null,"html_url":"https://github.com/tpbowden/swarm-ingress-router","commit_stats":null,"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/tpbowden/swarm-ingress-router","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tpbowden%2Fswarm-ingress-router","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tpbowden%2Fswarm-ingress-router/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tpbowden%2Fswarm-ingress-router/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tpbowden%2Fswarm-ingress-router/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tpbowden","download_url":"https://codeload.github.com/tpbowden/swarm-ingress-router/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tpbowden%2Fswarm-ingress-router/sbom","scorecard":{"id":896015,"data":{"date":"2025-08-11","repo":{"name":"github.com/tpbowden/swarm-ingress-router","commit":"b0829bdcacd9052046ea4a8e06e18b99a0443e60"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":2.9,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":1,"reason":"Found 4/25 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating alpine:3.4 to alpine:3.4@sha256:b733d4a32c4da6a00a84df2ca32791bb03df95400243648d8c539e7b4cce329c","Warn: containerImage not pinned by hash: Dockerfile.build:1: pin your Docker image by updating golang:1.7-alpine to golang:1.7-alpine@sha256:3f79ea057ef12518935ad981f62637d046a033eb10d28d5203c048837fedee58","Warn: goCommand not pinned by hash: Dockerfile.build:6","Info:   0 out of   2 containerImage dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T13:45:03.064Z","repository_id":57593043,"created_at":"2025-08-24T13:45:03.064Z","updated_at":"2025-08-24T13:45:03.064Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28437097,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T22:37:52.437Z","status":"ssl_error","status_checked_at":"2026-01-14T22:37:31.496Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","swarm"],"created_at":"2024-07-30T21:00:55.956Z","updated_at":"2026-01-14T22:53:06.684Z","avatar_url":"https://github.com/tpbowden.png","language":"Go","funding_links":[],"categories":["Container Operations","Go","Tools","docker","Reverse Proxy"],"sub_categories":["Reverse Proxy","Network"],"readme":"# Swarm ingress router\n\n## This package is not maintained. Do not attempt to use in production\n\nTry https://github.com/containous/traefik for all your reverse proxy needs\n\n---\n\nRoute DNS names to labelled Swarm services using Docker 1.12's internal service load balancing\n\n[![Build Status](https://travis-ci.org/tpbowden/swarm-ingress-router.svg?branch=master)](https://travis-ci.org/tpbowden/swarm-ingress-router) [![Go Report Card](https://goreportcard.com/badge/github.com/tpbowden/swarm-ingress-router)](https://goreportcard.com/report/github.com/tpbowden/swarm-ingress-router)\n\n## Features\n\n- No external load balancer or config files needed making for easy deployments\n- Integrated TLS decryption for services which provide a certificate and key\n- Automatic service discovery and load balancing handled by Docker\n- Scaled and maintained by the Swarm for high resilience and performance\n- Incredibly lightweight image (less than 20MB after decompression)\n\n## Installation\n\nThese are the manual steps to install the app. You can run `bootstrap.sh` to quickly create the required\nservices automatically.\n\nFirst of all you will need to create a network for your frontend services to run on and one for storage:\n\n    docker network create --driver=overlay frontends\n    docker network create --driver=overlay router-management\n\nNext you need to start Redis which will store service configuration\n\n    docker service create --name router-storage --network router-management redis:3.2-alpine\n\nThen you have to start the router's backend on management network. The service must be restricted to\nrun only on master nodes (as it has to query for services).\n\n    docker service create --name router-backend --constraint node.role==manager --mount \\\n      target=/var/run/docker.sock,source=/var/run/docker.sock,type=bind --network router-management \\\n      tpbowden/swarm-ingress-router:latest -r router-storage:6379 collector\n\nNow you can start the router's frontend on both the management and frontend network.\nIt must listen on the standard HTTP/HTTPS ports\n\n    docker service create --name router --mode global -p 80:8080 -p 443:8443 --network frontends \\\n      --network router-management tpbowden/swarm-ingress-router:latest -r \\\n      router-storage:6379 server -b 0.0.0.0\n\n### Start a demo app\n\nFinally, start your frontend service on the frontends network and it will be available on all of your Swarm nodes:\n\n    docker service create --name frontend --label ingress=true --label ingress.dnsname=example.local \\\n      --label ingress.targetport=80 --network frontends --label ingress.tls=true --label \\\n      ingress.forcetls=true --label ingress.cert=\"$(cat fixtures/cert.crt)\" --label \\\n      ingress.key=\"$(cat fixtures/key.key)\" nginx:stable-alpine\n\nIf you add a DNS record for `example.local` pointing to your Docker node in `/etc/hosts` you will be\nrouted to the service.\n\n## Usage\n\nIn order for the router to pick up a service, the service must have the following labels:\n\n- `ingress=true`\n- `ingress.dnsname=\u003cyour service's external DNS name\u003e`\n- `ingress.targetport=\u003cyour service's externally-facing port\u003e`\n\nFor TLS you need the following lables:\n\n- `ingress.tls=true`\n- `ingress.cert=\"$(cat \u003cyour crt file\u003e)\"`\n- `ingress.key=\"$(cat \u003cyour key file\u003e\"`\n\nTo force services to force TLS you can also use the following label:\n\n- `ingress.forcetls=true`\n\nYou do not need to publish the service's port as a node port as long as it is exposed internally and on the same network\nas the router.\n\n## Todo\n\n- Better logging\n- Command line argument for log level\n- Use Docker events to stay in sync and long polling as a fallback\n- Create a docker-compose file which can be converted into a stack\n- Add a heathcheck endpoint and use Docker's HEALTHCHECK instruction to ensure maximum uptime\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftpbowden%2Fswarm-ingress-router","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftpbowden%2Fswarm-ingress-router","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftpbowden%2Fswarm-ingress-router/lists"}