https://github.com/cycoresystems/ccproxy
HAProxy for use in the CyCore hosting network
https://github.com/cycoresystems/ccproxy
Last synced: about 1 year ago
JSON representation
HAProxy for use in the CyCore hosting network
- Host: GitHub
- URL: https://github.com/cycoresystems/ccproxy
- Owner: CyCoreSystems
- License: apache-2.0
- Created: 2015-09-21T15:41:36.000Z (over 10 years ago)
- Default Branch: master
- Last Pushed: 2020-09-14T20:00:34.000Z (almost 6 years ago)
- Last Synced: 2025-04-05T17:12:50.104Z (about 1 year ago)
- Language: Go
- Size: 27.3 KB
- Stars: 4
- Watchers: 4
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# ccproxy
[](https://quay.io/repository/cycore/ccproxy)
An etcd-backed haproxy sidekick.
Features:
* SNI (multiple certs on a single IP)
* etcd-based configuration and certificate storage, with change detection
* manages restarts of haproxy on configuration change (via systemd)
See the [Unit file](ccproxy@.service) for usage information.
## Frontends
Frontends use the primary public IP addresses for the hosting node, registering them
with the DNS service. The record ids for the created DNS records are stored in etcd
in the key `/cycore/proxy/dns/` so that these records may be updated or
deleted at a later time.
## Backends
Backends are updated based on the information registered by `gliderlabs/registrator`,
pulled from the name referenced in `/cycore/proxy/services/`. In other words, the
actual service needs to be executed with the environment variable `SERVICE_NAME` set
corresponding to the `/cycore/proxy/services/` key.
## DNS Names
One or more DNS hostnames must be specified for haproxy to respond to.
## Ports
For now, only ports 80 and 443 are used, and there is no support for specifying any
others.
## Certificate/TLS
The presence or absence of a TLS certificate bundle in `/cycore/proxy/services//cert`
determines whether to offer SNI redirecting and TLS termination for the service. The
value of that key should be the complete bundled `.pem` file.