Reverse Proxy

Pone Fluxheim ante ministrum applicationis. Fluxheim tractat TLS, capita, limites et electionem upstream.

Basic proxy

[[vhosts]]
name = "app"
hosts = ["app.example.com"]

[[vhosts.routes]]
path_prefix = "/"
action = "proxy"
upstreams = ["127.0.0.1:3000"]

Electiones itineris

Facultas	Utere cum
`path_exact`	One URL needs a precise iter.
`path_prefix`	Totum URL subtree ad unum backend accedit.
`strip_prefix`	The backend should not see the publicum prefix.
`rewrite_prefix`	Backendula aliam praepositionem internam exspectat.
`methods`	A iter should tantum accept selected HTTP methods.

Exemplum path rewrite

[[vhosts.routes]]
name = "api"
path_prefix = "/api/"
strip_prefix = "/api/"
rewrite_prefix = "/internal/"

[vhosts.routes.proxy]
upstreams = ["10.0.0.20:8080"]
connect_timeout_secs = 5
read_timeout_secs = 30
send_timeout_secs = 30

CORS pro applicationibus navigatoris

CORS da tantum cum applicationes navigatoris ex originibus notis hanc viam appellare debent.

[headers.cors]
enabled = true
allow_origins = ["https://app.example.com"]
allow_methods = ["GET", "HEAD", "POST"]
allow_headers = ["authorization", "content-type"]
allow_credentials = true
max_age_secs = 600

Fluxheim petitionibus praeviis validis localiter respondet; petitiones praeviae recusatae 403 reddunt nec applicationem attingunt.
Originem universalem cum documentis authenticationis ne coniungas.
CORS neque authenticatio neque auctoritas neque tutela CSRF est.

Notae productionis

Serva applicationem in loopback aut reti privato.
Constitue limites corporis petitionis antequam uploads exponas.
Use trusted proxy settings only for networks you control.
Prefer explicit itinera over one large fallback when different semitae need different safety rules.