Reverse Proxy
Pastatyk Fluxheim prieš application server. Fluxheim tvarko TLS, header, limitus ir upstream pasirinkimą.
Basic proxy
[[vhosts]]
name = "app"
hosts = ["app.example.com"]
[[vhosts.routes]]
path_prefix = "/"
action = "proxy"
upstreams = ["127.0.0.1:3000"]
Route pasirinkimai
| Funkcija | Naudok, kai |
|---|---|
path_exact | Vienam URL reikia tikslios route. |
path_prefix | Visas URL subtree eina į vieną backend. |
strip_prefix | Backend pusė pusė neturi matyti public prefix. |
rewrite_prefix | Backend pusė pusė tikisi kitokio internal prefix. |
methods | Route turi priimti tik pasirinktus HTTP method. |
Path rewrite pavyzdys
[[vhosts.routes]]
name = "api"
path_prefix = "/api/"
strip_prefix = "/api/"
rewrite_prefix = "/internal/"
[vhosts.routes.proxy]
upstreams = ["10.0.0.20:8080"]
connect_timeout_secs = 5
read_timeout_secs = 30
send_timeout_secs = 30
Production pastabos
- Laikyk aplikaciją loopback arba privačiame tinkle.
- Nustatyk request body limitus prieš atveriant upload.
- Use trusted proxy settings only for networks you control.
- Rinkis explicit route vietoj vieno didelio fallback, kai skirtingiems path reikia skirtingų safety rules.