Najnovija stabilna — v1.8.0

Download Fluxheim

Unaprijed izgrađeni Linux binarni paketi za x86_64 i ARM64, plus macOS razvojni buildovi. Objavljeno 23. jula 2026..

Puni Preporučeno

Puni production build

Svi stabilni production moduli: proxy, web, cache, compression, load balancing, raw TCP stream proxying, TLS (rustls), PHP-FPM, ACME client, GeoIP/Geo-Context, security hardening, metrics i OpenTelemetry.

Static serving s reverse proxy i PHP-FPM

Cache backendi (memory, disk, tiered)

gzip, zstd i Brotli compression

TLS i managed ACME renewal

Local GeoIP country/ASN kontekst

Hardened TCP stream proxying način

Prometheus i OpenTelemetry

~10.3 MB binary

x86_64 ARM64

Load balancer Novo

Load Balancer Edge profil

Fokusirani HTTP/TCP load-balancer build bez cache, static web, PHP, GeoIP, stream proxying ili traffic mirroring.

Advanced pool selection

Drain, disable, force-down operacije

Hardened LB core dio

TLS i managed ACME renewal

x86_64 ARM64

PHP Managed PHP-FPM način

PHP application build

Static web + reverse proxy + PHP-FPM FastCGI bridge. Idealno za WordPress i PHP front-controller apps. Cache module nije kompajliran.

PHP-FPM FastCGI bridge put

Static asset serving iz istog root

TLS i managed ACME renewal

~8.9 MB binary

x86_64 ARM64

Cache edge

Cache Edge build

Fokusirani cache edge bez local static web serving. Uključuje proxy, cache, compression, TLS i ACME. Idealno za CDN-style deployment.

Reverse proxy s cache

Cache-safe compression controls skup

TLS i managed ACME renewal

Static web module nije kompajliran

~6.8 MB binary

x86_64 ARM64

Proxy edge

Proxy Edge build

Fokusirani reverse proxy bez cache, static web ili namjenskog load-balancer module. Dizajniran za pure reverse-proxy deployment s TLS, ACME, compression i upstream resilience.

Samo reverse proxy

ACL, rate limits, retries, health checks

TLS i managed ACME renewal

Cache ili web module nisu kompajlirani

~5.8 MB binary

x86_64 ARM64

Wasm Novo

Wasm produkcijska verzija

Namjenska Wasm verzija zasnovana na punom produkcijskom profilu, s ograničenim programskim kukama, ACME-om, metrikama i OpenTelemetryjem.

Static serving s reverse proxy i PHP-FPM

Cache backendi (memory, disk, tiered)

WASM ekstenzije

TLS i managed ACME renewal

Prometheus i OpenTelemetry

x86_64 ARM64

Platform Downloads

Production Linux builds plus Level 1 macOS developer tarballs.

macOS je samo za developer testing

Build profil	Linux x86_64	Linux ARM64	macOS razvoj
Puni	x86_64-linux	aarch64-linux	Apple Silicon
Wasm	x86_64-linux	aarch64-linux	Apple Silicon
PHP	x86_64-linux	aarch64-linux	-
Load balancer	x86_64-linux	aarch64-linux	-
Cache edge	x86_64-linux	aarch64-linux	-
Proxy edge	x86_64-linux	aarch64-linux	-
Config tester alat	x86_64-linux	aarch64-linux	-

Instalacija

bash — tarball instalacija

# 1. Preuzmi puni Linux build tarball
# Na ARM64 serverima koristi aarch64-linux umjesto x86_64-linux.
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
  -o fluxheim-1.8.0.tar.gz

# 2. Provjeri i raspakiraj
tar xzf fluxheim-1.8.0.tar.gz

# 3. Premjesti binary i helper tools u system path
sudo mv fluxheim /usr/local/bin/
sudo mv fluxheim-acme /usr/local/bin/            # ACME companion alat
sudo mv fluxheim-config-tester /usr/local/bin/   # Config validator alat

# 4. Stvori config directory i dodaj svoj config
sudo mkdir -p /etc/fluxheim /srv/fluxheim
sudo cp packaging/default/fluxheim.toml /etc/fluxheim/fluxheim.toml

# 5. Validiraj config
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml

# 6. Pokreni izravno (ili vidi Systemd tab za service setup)
sudo fluxheim --config /etc/fluxheim/fluxheim.toml

bash — rootless Podman pokretanje

# Preuzmi GHCR image (Wasm, full, load-balancer, cache, proxy i PHP varijante)
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0         # puni
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-load-balancer # load balancer profil
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-cache   # cache edge profil
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-proxy   # proxy edge profil
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-php     # upravljani PHP-FPM

# Isti build set dostupan je na Quay
podman pull quay.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull quay.io/valkyoth/fluxheim:v1.8.0-load-balancer
podman pull quay.io/valkyoth/fluxheim:v1.8.0-cache
podman pull quay.io/valkyoth/fluxheim:v1.8.0-proxy
podman pull quay.io/valkyoth/fluxheim:v1.8.0-php

# Pokreni rootless — interni portovi 8080 i 8443
podman run -d \
  --name fluxheim \
  --restart unless-stopped \
  -p 8080:8080 \
  -p 8443:8443 \
  -v /srv/sites:/srv/sites:ro \
  -v /srv/fluxheim/certs:/etc/fluxheim/certs:rw \
  -v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
  ghcr.io/valkyoth/fluxheim:v1.8.0

# Provjeri log
podman logs -f fluxheim

bash — systemd service postava

# Tarball uključuje hardened systemd unit
sudo cp packaging/systemd/fluxheim.service /etc/systemd/system/

# Stvori fluxheim system user
sudo useradd -r -s /sbin/nologin -d /var/lib/fluxheim fluxheim

# Pripremi directory
sudo mkdir -p /etc/fluxheim /srv/fluxheim /var/log/fluxheim
sudo chown fluxheim:fluxheim /srv/fluxheim /var/log/fluxheim

# Reload systemd i omogući service
sudo systemctl daemon-reload
sudo systemctl enable --now fluxheim

# Provjeri status
sudo systemctl status fluxheim
sudo journalctl -u fluxheim -f

Napomena: Paketirani systemd unit koristi CAP_NET_BIND_SERVICE tako da Fluxheim može bind na portove 80 i 443 bez rada kao root. Unit file uključuje security hardening options.

bash — managed ACME certificate izdavanje

# Fluxheim uključuje acme-init za vođeni setup certifikata
# Let's Encrypt issuer (HTTP-01)
sudo fluxheim acme-init letsencrypt

# Actalis (besplatan EAB-capable issuer)
sudo fluxheim acme-init actalis

# Companion tool fluxheim-acme upravlja renewals za
# container i external service-manager deployment
fluxheim-acme status
fluxheim-acme renew
fluxheim-acme reload

fluxheim.toml — ACME konfiguracija

[[vhosts]]
name = "site"
hosts = ["example.com", "www.example.com"]

[vhosts.tls]
enabled = true

[vhosts.tls.acme]
enabled = true
# issuer postavka: issuer = "letsencrypt"

Puna TLS i ACME dokumentacija →

Sistemski zahtjevi

Podržane platforme

Linux x86_64 (kernel 4.14+)
Linux ARM64 / aarch64
samo macOS developer binary

Container image

Svi release image buildovi objavljeni su na GHCR i Quay.

Wolfi (minimalan, hardened)
Full, load-balancer, cache, proxy i PHP image profiles
Alpine Linux
SUSE Micro
Debian
Objavljeno na GHCR i Quay

All Releases

Pogledaj sve na GitHubu →

Verzija	Datum	Najvažnije	Preuzimanja
v1.8.0 Najnovije	July 2026	Namjenska Wasm verzija zasnovana na punom produkcijskom profilu, s ograničenim programskim kukama, ACME-om, metrikama i OpenTelemetryjem. Dodaje odgovarajuće tar.gz i ZIP arhive, uključujući nativne pune i Wasm verzije za macOS. Jača granice popunjavanja keša, keša raspona i Wasm prihvata po virtuelnom hostu.	Sve na GitHubu
v1.7.0 – v1.7.12	July 2026	Fluxheim 1.7 serija izdanja: keš memorija, proxy i metapodaci odgovora zasnovani na standardima; ponovno učitavanje i vraćanje autentificiranog snimka uživo; ponovljivi dokazi FIPS-backend; nadogradnje procesa bez zastoja; nezavisno testirani primeri politike Wasm; i jači keš, TLS, međuspremnik, tok i granice protokola.	Sve na GitHubu
v1.6.0 – v1.6.37	lipanj 2026.	Native-runtime cutover i linija čišćenja: Pingora-exit temelji, Fluxheimovi HTTP/1 i HTTP/2 putevi, native TLS/listener pregledi, route proxy/static-web paritet, kompresija i stranice grešaka, forwarded-header politika, auth-request, mirroring prometa, rate limits, gRPC validacija, pooled upstream HTTP/2, native proxy čišćenje poslije cutovera, završno čišćenje crate granica prije Wasm-a, Rust 1.96.1, ojačani OpenSSL stream TLS, zeroizacija ACME računa i manji fokusirani runtime moduli.	Sve na GitHubu
v1.5.0 - v1.5.23	lipanj 2026.	Enterprise load-balancer i runtime-ownership linija: fokusirani load-balancer binary/image, runtime member i weight controls, managed affinity cookies, stream i HTTP boundary work, active i protocol-aware health checks, service discovery, background task ownership, cache crate boundaries, UDP beta guardrails, origin-protection budgets, ARM/macOS assets i široki security hardening.	Sve na GitHubu
v1.4.0 – v1.4.7	svibanj 2026.	Proxy operations linija s production proxy parity, bogatijom route policy, traffic mirroring, dynamic upstream discovery, modular runtime/config split, Apple Silicon i Linux ARM64 release assets, GeoIP/Geo-Context, config-tester archives i hardened TCP stream proxying	Sve na GitHubu
v1.3.0 – v1.3.7	svibanj 2026.	PHP-FPM production linija, managed php-fpm supervision, config tester i ACME companion binary, FIPS/ISO validation tracks, fokusirani cache/proxy profile i security hardening	Sve na GitHubu
v1.2.0 – v1.2.6	svibanj 2026.	Cache i observability baseline s route-scoped cache policy, memory/disk/tiered backend, encrypted disk cache, peer fill, range caching, Prometheus i OpenTelemetry export	Sve na GitHubu
v1.1.x	2026	Certificate operations linija s TLS policy profile, multi-certificate rustls SNI, managed ACME issuance i renewal, EAB-capable issuers, file-backed TLS secrets i renewal units	Sve na GitHubu
v1.0.0	2026	Gateway foundation s vhost routing, route-level static/proxy/redirect actions, static file serving, reverse proxying, rustls TLS, admin control-plane, secure headers, systemd packaging i rootless containers	GitHub
v0.5.0	Pre-release izdanje	Prvi public pre-release milestone prije stabilne 1.x gateway linije	GitHub

See Dnevnik promjena za detaljne release notes.