Pregled
Kratak pogled na Fluxheim u production deploymentu.
Modularni reverse proxy, cache, load balancer i statički host napisan u Rustu. Siguran po zadanim postavkama uz TLS, ACME, compression, edge policy, dynamic upstream discovery i siguran traffic mirroring.
include_conf_d = false
[server]
listen = ["0.0.0.0:80"]
tls_listen = ["0.0.0.0:443"]
default_vhost = "fluxheim.eu"
[tls]
enabled = true
backend = "rustls"
profile = "intermediate"
min_protocol = "tls1.2"
alpn = "http1-and-http2"
curve_preferences = ["X25519", "CurveP256", "CurveP384"]
[[vhosts]]
name = "fluxheim.eu"
hosts = ["fluxheim.eu"]
[vhosts.tls]
enabled = true
[vhosts.tls.certificate]
cert_path = "/etc/fluxheim/tls/fluxheim.eu/fullchain.pem"
key_path = "/etc/fluxheim/tls/fluxheim.eu/privkey.pem"
[vhosts.web]
root = "/srv/sites/fluxheim.eu"
index_files = ["index.html"]Fluxheim se isporučuje kao fokusirane, modularne build verzije: koristi samo ono što tvojem deploymentu treba.
Napisan u Rustu s fiksiranim stabilnim toolchainom. Bez buffer overflow, use-after-free ili data race problema po konstrukciji.
Rust-native edge runtime s connection pooling, upstream retry, aktivnim health check, HTTP/2, WebSocket upgrade i gRPC pass-through.
Fokusirani load-balancer 1.5 binary i image s advanced selection, lokalnom perzistencijom, health/ejection policy, bounded code i runtime member controls.
Kompiliraj samo ono što trebaš. Fokusirani profili za statički site, edge cache, reverse proxy, load balancing, TCP stream proxying, PHP-FPM, GeoIP, traffic mirroring i production bundle s compression.
rustls-first pristup s OpenSSL i FIPS/ISO build putovima, client certificate auth, upstream mTLS, automatskim ACME izdavanjem i multi-cert SNI.
Memory, disk, tiered i encrypted cache backendi s cache-safe gzip, Zstandard i Brotli compression te range caching za velike objekte.
Rootless Podman image za Wolfi, Alpine, SUSE Micro i Debian. Systemd/RPM za native deployment. Bez vanjskih asseta pri pokretanju.
Opt-in Prometheus metrics listener, OTLP metrics export, trace context propagation i OTLP trace export za potpunu observability.
Opcijski lokalni MMDB lookup za country i ASN policy s MaxMind GeoIP2/GeoLite2 ili CIRCL Geo Open datasetom. Nema remote lookup ni downloadera u request path.
Raw L4 TCP servisi s namjenskim stream route, stvarnim idle/lifetime/byte cap, upstream TLS/mTLS kontrolama, weighted/drain/backup policy i lokalnim PROXY protocol na route razini.
Opt-in PHP-FPM FastCGI bridge za front-controller aplikacije poput WordPressa. Stroga script resolution i bounded request handling.
Trusted-proxy-aware ACL, rate limit, auth subrequest, traffic mirroring, regex rewrite, bounded code, stroga config validation i hardened request handling.
Download a pre-built binary, drop in a config file, and start serving. Native systemd units and container images included.
# Preuzmi i raspakiraj puni build
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.6.30/fluxheim-1.6.30-full-x86_64-linux.tar.gz \
| tar xz
# Premjesti binary u system path
sudo mv fluxheim /usr/local/bin/
# Validiraj config prije pokretanja
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml
# Pokreni sa systemd (unit file uključen)
sudo systemctl enable --now fluxheim# Preuzmi iz GHCR ili Quay
podman pull ghcr.io/valkyoth/fluxheim:v1.6.30
podman pull quay.io/valkyoth/fluxheim:v1.6.30
# Pokreni rootless s mountanim config
podman run -d \
--name fluxheim \
-p 8080:8080 -p 8443:8443 \
-v /srv/sites:/srv/sites:ro \
-v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
ghcr.io/valkyoth/fluxheim:v1.6.30
# Dostupne image varijante: full, load-balancer, cache, proxy, php# Kloniraj i kompajliraj default profile
git clone https://github.com/valkyoth/fluxheim
cd fluxheim
# Zadani build (proxy + web + cache + tls-rustls + security)
cargo build --release
# Ili kompajliraj fokusirani profile
cargo build --release --no-default-features \
--features profile-proxy-edge,acme-client
# Validiraj config i pokreni
cargo run --release -- \
--check-config --config examples/fluxheim.tomlStvoren za operatore koji žele moderan, auditabilan stack bez skrivenog legacy ponašanja.
Config validation je stroga. Dvosmislene ili nesigurne opcije odbijaju se, ne prihvaćaju se tiho.
Ponovljivi buildovi. Svaka dependency je fiksirana. cargo audit and cargo deny run in CI.
Pokreći bez root. Interni portovi 8080/8443 po zadanim postavkama. Eksplicitne runtime image za različite operativne policy.
Copyleft licenca kompatibilna s mnogim OSS licencama. EU podrijetlo, pravno jasna za državnu i enterprise uporabu.
Kratak pogled na Fluxheim u production deploymentu.