Download Fluxheim
Pre-built Linux binaries for x86_64 and ARM64, plus macOS developer builds. Publicēts 2026. gada 23. jūnijā.
Pilns production build
Visi stabilie production moduļi: proxy, web, cache, compression, load balancing, raw TCP stream proxying, TLS (rustls), PHP-FPM, ACME client, GeoIP/Geo-Context, security hardening, metrics un OpenTelemetry.
Load balancer edge
Fokusēts HTTP/TCP load-balancer build bez cache, static web, PHP, GeoIP, stream proxying vai traffic mirroring.
PHP lietotnes build
Static web + reverse proxy + PHP-FPM FastCGI tilts. Piemērots WordPress un PHP front-controller lietotnēm. Cache modulis netiek kompilēts.
Cache edge build
Fokusēts cache edge bez lokāla static web serving. Ietver proxy, cache, compression, TLS un ACME. Piemērots CDN stila deploymentiem.
Proxy edge build
Fokusēts reverse proxy bez cache, static web vai īpašā load-balancer moduļa. Paredzēts tīriem reverse-proxy deploymentiem ar TLS, ACME, compression un upstream resilience.
Platform Downloads
Production Linux builds plus Level 1 macOS developer tarballs.
| Build tips | Linux x86_64 | Linux ARM64 | macOS dev |
|---|---|---|---|
| Pilns | x86_64-linux | aarch64-linux | Apple Silicon |
| PHP | x86_64-linux | aarch64-linux | - |
| Load Balancer | x86_64-linux | aarch64-linux | - |
| Cache edge | x86_64-linux | aarch64-linux | - |
| Proxy edge | x86_64-linux | aarch64-linux | - |
| Config tester rīks | x86_64-linux | aarch64-linux | - |
Instalēšana
# 1. Lejupielādē pilno Linux build tarball
# ARM64 serveriem izmanto aarch64-linux, nevis x86_64-linux.
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.6.30/fluxheim-1.6.30-full-x86_64-linux.tar.gz \
-o fluxheim-1.6.30.tar.gz
# 2. Pārbaudi un atpako
tar xzf fluxheim-1.6.30.tar.gz
# 3. Pārvieto bināru un palīgrīkus uz system path
sudo mv fluxheim /usr/local/bin/
sudo mv fluxheim-acme /usr/local/bin/ # ACME palīgrīks
sudo mv fluxheim-config-tester /usr/local/bin/ # Config validatorss
# 4. Izveido config direktoriju un pievieno savu config
sudo mkdir -p /etc/fluxheim /srv/fluxheim
sudo cp packaging/default/fluxheim.toml /etc/fluxheim/fluxheim.toml
# 5. Valideē config
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml
# 6. Palaid tieši (vai skaties Systemd cilni servisa iestatīšanai)
sudo fluxheim --config /etc/fluxheim/fluxheim.toml
# Pull GHCR image'us (full, load-balancer, cache, proxy un PHP varianti)
podman pull ghcr.io/valkyoth/fluxheim:v1.6.30 # pilns build
podman pull ghcr.io/valkyoth/fluxheim:v1.6.30-load-balancer # slodzes balansētājs
podman pull ghcr.io/valkyoth/fluxheim:v1.6.30-cache # cache edge variants variants
podman pull ghcr.io/valkyoth/fluxheim:v1.6.30-proxy # proxy edge variants variants
podman pull ghcr.io/valkyoth/fluxheim:v1.6.30-php # pārvaldīts PHP-FPM
# Tas pats build komplekts ir pieejams Quay
podman pull quay.io/valkyoth/fluxheim:v1.6.30
podman pull quay.io/valkyoth/fluxheim:v1.6.30-load-balancer
podman pull quay.io/valkyoth/fluxheim:v1.6.30-cache
podman pull quay.io/valkyoth/fluxheim:v1.6.30-proxy
podman pull quay.io/valkyoth/fluxheim:v1.6.30-php
# Palaid rootless - iekšējie porti 8080 un 8443
podman run -d \
--name fluxheim \
--restart unless-stopped \
-p 8080:8080 \
-p 8443:8443 \
-v /srv/sites:/srv/sites:ro \
-v /srv/fluxheim/certs:/etc/fluxheim/certs:rw \
-v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
ghcr.io/valkyoth/fluxheim:v1.6.30
# Pārbaudi logus
podman logs -f fluxheim
# Tarball arhīvs arhīvs satur hardened systemd unit
sudo cp packaging/systemd/fluxheim.service /etc/systemd/system/
# Izveido fluxheim sistēmas lietotāju
sudo useradd -r -s /sbin/nologin -d /var/lib/fluxheim fluxheim
# Sagatavo direktorijas
sudo mkdir -p /etc/fluxheim /srv/fluxheim /var/log/fluxheim
sudo chown fluxheim:fluxheim /srv/fluxheim /var/log/fluxheim
# Pārlādē systemd un ieslēdz servisu
sudo systemctl daemon-reload
sudo systemctl enable --now fluxheim
# Pārbaudi statusu
sudo systemctl status fluxheim
sudo journalctl -u fluxheim -f
Piezīme: Pakotais systemd unit izmanto CAP_NET_BIND_SERVICE lai Fluxheim varētu bindot portus 80 un 443 bez root lietotāja. Unit file satur security hardening opcijas.
# Fluxheim piegādā acme-init vadītai sertifikātu iestatīšanai
# Let's Encrypt sertifikāts (HTTP-01)
sudo fluxheim acme-init letsencrypt
# Actalis (bezmaksas EAB-capable issuer)
sudo fluxheim acme-init actalis
# Palīgrīks fluxheim-acme apstrādā atjaunošanu
# konteineru un ārēju service-manager deploymentiem
fluxheim-acme status
fluxheim-acme renew
fluxheim-acme reload
[[vhosts]]
name = "site"
hosts = ["example.com", "www.example.com"]
[vhosts.tls]
enabled = true
[vhosts.tls.acme]
enabled = true
# issuer = "letsencrypt" # izdevējs
Sistēmas prasības
Atbalstītās platformas
- Linux x86_64 (kernel 4.14+)
- Linux ARM64 / aarch64
- Tikai macOS izstrādes bināri
Konteineru image'i
Visi release image buildi tiek publicēti GHCR un Quay.
- Wolfi (minimāls, hardened)
- Pilns, load-balancer, cache, proxy un PHP image profili
- Alpine Linux
- SUSE Micro
- Debian
- Publicēts GHCR un Quay
All Releases
Skatīt visu GitHub →| Versija | Datums | Svarīgākais | Lejupielādes |
|---|---|---|---|
|
v1.6.0 – v1.6.30
Jaunākā sērija
|
2026. gada jūnijs | Native-runtime cutover līnija: Pingora-exit pamati, Fluxheim īpašumā esoši HTTP/1 un HTTP/2 pathi, native TLS/listener preview, route proxy/static-web parity, compression un error pages, forwarded-header policy, auth-request, traffic mirroring, rate limit, gRPC validation, pooled upstream HTTP/2 un hardened runtime evidence. | Viss GitHub |
| v1.5.0 - v1.5.23 | 2026. gada jūnijs | Enterprise load-balancer un runtime-ownership līnija: fokusēti load-balancer bināri/image'i, runtime member un weight controls, managed affinity cookies, stream un HTTP boundary work, active un protocol-aware health checks, service discovery, background task ownership, cache crate boundaries, UDP beta guardrails, origin-protection budgets, ARM/macOS asseti un plašs security hardening. | Viss GitHub |
| v1.4.0 – v1.4.7 | 2026. gada maijs | Proxy operations līnija ar production proxy parity, bagātāku route policy, traffic mirroring, dynamic upstream discovery, modular runtime/config split, Apple Silicon un Linux ARM64 release assetiem, GeoIP/Geo-Context, config-tester arhīviem un hardened TCP stream proxying | Viss GitHub |
| v1.3.0 – v1.3.7 | 2026. gada maijs | PHP-FPM production līnija, pārvaldīta php-fpm supervision, config tester un ACME companion bināri, FIPS/ISO validation tracks, fokusēti cache/proxy profili un security hardening | Viss GitHub |
| v1.2.0 – v1.2.6 | 2026. gada maijs | Cache un observability baseline ar route-scoped cache policy, memory/disk/tiered backendiem, encrypted disk cache, peer fill, range caching, Prometheus un OpenTelemetry export | Viss GitHub |
| v1.1.x | 2026 | Certificate operations līnija ar TLS policy profiles, multi-certificate rustls SNI, managed ACME issuance un renewal, EAB-capable issueriem, file-backed TLS secrets un renewal units | Viss GitHub |
| v1.0.0 | 2026 | Gateway pamats ar vhost routing, route-level static/proxy/redirect action, static file serving, reverse proxying, rustls TLS, admin control-plane, secure headers, systemd packaging un rootless konteineriem | GitHub |
| v0.5.0 | Priekšizlaidums | Pirmais publiskais pre-release atskaites punkts pirms stabilās 1.x gateway līnijas | GitHub |
Skatīt Izmaiņu žurnāls detalizētām release notes.