Stabbli l-aktar reċenti — v1.8.0

Download Fluxheim

Binari Linux mibnija minn qabel għal x86_64 u ARM64, flimkien ma’ builds għall-iżviluppaturi fuq macOS. Ħareġ fit-23 ta' Lulju 2026.

Sħiħ Rakkomandat

Bini sħiħ għall-produzzjoni

All stabbli production modules: proxy, web, cache, kompressjoni, load balancing, raw TCP stream proxying, TLS (rustls), PHP-FPM, ACME client, GeoIP/Geo-Context, sigurtà hardening, metriki, u OpenTelemetry.

Static servizz + reverse proxy + PHP-FPM

Cache backends (memorja, diska, tiered)

gzip, zstd, u Brotli kompressjoni

TLS + ACME ġestit renewal

Lokali GeoIP country/ASN context

Imwebbes TCP stream proxying

Prometheus u OpenTelemetry

~10.3 MB binary

x86_64 ARM64

Profil tal-bilanċjar tat-tagħbija Ġdid

Load Balancer Xifer

Iffukat HTTP/TCP load-balancer jibni mingħajr cache, web statiku, PHP, GeoIP, stream proxy, jew riflessjoni tat-traffiku.

Advanced pool selection

Ixxotta, skonnettja, forza-down

Imwebbes LB core

TLS + ACME ġestit renewal

x86_64 ARM64

PHP Ġestit PHP-FPM

Applikazzjoni PHP Ibni

Web statiku + reverse proxy + PHP-FPM FastCGI bridge. Ideal għal WordPress u PHP front-controller apps. No cache module compiled.

Pont PHP-FPM FastCGI

Static asset servizz minn same root

TLS + ACME ġestit renewal

~8.9 MB binary

x86_64 ARM64

Profil cache

Cache Xifer Ibni

Xifer tal-cache ffokat mingħajr servut tal-web statiku lokali. Jinkludi proxy, cache, kompressjoni, TLS, u ACME. Ideali għal skjeramenti ta' stil CDN.

Reverse proxy u cache

Cache-sikur kompressjoni kontrolli

TLS + ACME ġestit renewal

No web statiku module compiled

~6.8 MB binary

x86_64 ARM64

Profil proxy

Proxy Xifer Ibni

Reverse proxy iffokat mingħajr cache, web statiku, jew il-modulu ddedikat tal-ibbilanċjar tat-tagħbija. Iddisinjat għal skjeramenti ta' reverse-proxy pur b'TLS, ACME, kompressjoni, u reżiljenza upstream.

Reverse proxy biss

ACLs, rate limiti, retries, saħħa kontrolli

TLS + ACME ġestit renewal

No cache jew web module compiled

~5.8 MB binary

x86_64 ARM64

Wasm Ġdid

Build Wasm għall-Produzzjoni

Kumpilazzjoni Wasm apposta bbażata fuq il-profil sħiħ tal-produzzjoni, b'punti ta' intervent limitati għall-politiki, ACME, metriċi u OpenTelemetry.

Static servizz + reverse proxy + PHP-FPM

Cache backends (memorja, diska, tiered)

Estensjonijiet WASM

TLS + ACME ġestit renewal

Prometheus u OpenTelemetry

x86_64 ARM64

Platform Downloads

Production Linux builds plus Level 1 macOS developer tarballs.

macOS is għal developer testing biss

Bini	Linux x86_64	Linux ARM64	macOS dev
Sħiħ	x86_64-linux	aarch64-linux	Apple Silicon
Wasm	x86_64-linux	aarch64-linux	Apple Silicon
PHP	x86_64-linux	aarch64-linux	-
Profil tal-bilanċjar tat-tagħbija	x86_64-linux	aarch64-linux	-
Profil cache	x86_64-linux	aarch64-linux	-
Profil proxy	x86_64-linux	aarch64-linux	-
Konfigurazzjoni tester	x86_64-linux	aarch64-linux	-

Installazzjoni

bash — installazzjoni tarball

# 1. Niżżel it-tarball sħiħ tal-build Linux
# Uża aarch64-linux minflok x86_64-linux fuq servers ARM64.
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
  -o fluxheim-1.8.0.tar.gz

# 2. Ivverifika u estratta
tar xzf fluxheim-1.8.0.tar.gz

# 3. Mexxi l-binarju u l-għodod ta’ għajnuna lejn il-path tas-sistema
sudo mv fluxheim /usr/local/bin/
sudo mv fluxheim-acme /usr/local/bin/            # Kumpann ACME
sudo mv fluxheim-config-tester /usr/local/bin/   # Validatur tal-config

# 4. Oħloq direttorju tal-config u żid il-config tiegħek
sudo mkdir -p /etc/fluxheim /srv/fluxheim
sudo cp packaging/default/fluxheim.toml /etc/fluxheim/fluxheim.toml

# 5. Ivvalida config
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml

# 6. Ħaddem direttament (jew ara t-tab Systemd għas-setup tas-servizz)
sudo fluxheim --config /etc/fluxheim/fluxheim.toml

bash — mingħajr root Podman

# Iġbed images GHCR (Wasm, varjanti full, load-balancer, cache, proxy u PHP)
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0         # sħiħ
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-load-balancer # Profil tal-bilanċjar tat-tagħbija
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-cache   # tarf tal-cache
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-proxy   # tarf prokura
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-php     # PHP-FPM ġestit

# L-istess sett ta’ builds huwa disponibbli fuq Quay
podman pull quay.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull quay.io/valkyoth/fluxheim:v1.8.0-load-balancer
podman pull quay.io/valkyoth/fluxheim:v1.8.0-cache
podman pull quay.io/valkyoth/fluxheim:v1.8.0-proxy
podman pull quay.io/valkyoth/fluxheim:v1.8.0-php

# Ħaddem mingħajr root — ports interni 8080 u 8443
podman run -d \
  --name fluxheim \
  --restart unless-stopped \
  -p 8080:8080 \
  -p 8443:8443 \
  -v /srv/sites:/srv/sites:ro \
  -v /srv/fluxheim/certs:/etc/fluxheim/certs:rw \
  -v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
  ghcr.io/valkyoth/fluxheim:v1.8.0

# Iċċekkja logs
podman logs -f fluxheim

bash — servizz systemd

# It-tarball jinkludi unit systemd imwebbes
sudo cp packaging/systemd/fluxheim.service /etc/systemd/system/

# Oħloq l-utent tas-sistema fluxheim
sudo useradd -r -s /sbin/nologin -d /var/lib/fluxheim fluxheim

# Ipprepara d-direttorji
sudo mkdir -p /etc/fluxheim /srv/fluxheim /var/log/fluxheim
sudo chown fluxheim:fluxheim /srv/fluxheim /var/log/fluxheim

# Erġa’ għabbi systemd u attiva s-servizz
sudo systemctl daemon-reload
sudo systemctl enable --now fluxheim

# Iċċekkja l-istatus
sudo systemctl status fluxheim
sudo journalctl -u fluxheim -f

Nota: The packaged unit systemd uses CAP_NET_BIND_SERVICE so Fluxheim can bind to ports 80 u 443 mingħajr running as root. The unit fajl includes sigurtà hardening options.

bash — ACME ġestit ċertifikat issuance

# Fluxheim jiġi b’acme-init għal setup iggwidat taċ-ċertifikati
# Ejja Encrypt (HTTP-01)
sudo fluxheim acme-init letsencrypt

# Actalis (issuer b’kapaċità EAB b’xejn)
sudo fluxheim acme-init actalis

# L-għodda kumpann fluxheim-acme tittratta t-tiġdid għal
# deployments ta’ kontenituri u service managers esterni
fluxheim-acme status
fluxheim-acme renew
fluxheim-acme reload

fluxheim.toml — konfigurazzjoni ACME

[[vhosts]]
name = "site"
hosts = ["example.com", "www.example.com"]

[vhosts.tls]
enabled = true

[vhosts.tls.acme]
enabled = true
# eżempju: issuer = "letsencrypt"

Dokumentazzjoni sħiħa TLS & ACME →

Rekwiżiti tas-sistema

Pjattaformi appoġġjati

Linux x86_64 (kernel 4.14+)
Linux ARM64 / aarch64
macOS developer binaries biss

Immaġnijiet tal-kontenituri

All ħarġa image builds are published on GHCR u Quay.

Wolfi (minimal, imwebbes)
Full, load-balancer, cache, proxy, u PHP image profili
Alpine Linux
SUSE Micro
Debian
Ippubblikat fuq il-GHCR u l-Moll

All Releases

Ara kollox fuq GitHub →

Verżjoni	Data	Punti ewlenin	Niżżliet
v1.8.0 L-aktar reċenti	July 2026	Kumpilazzjoni Wasm apposta bbażata fuq il-profil sħiħ tal-produzzjoni, b'punti ta' intervent limitati għall-politiki, ACME, metriċi u OpenTelemetry. Iżid arkivji tar.gz u ZIP korrispondenti, inklużi builds nattivi sħaħ u Wasm għal macOS. Isaħħaħ il-limiti tad-dħul għall-mili tal-cache, il-cache tal-firxiet u Wasm għal kull vhost.	Kollox fuq GitHub
v1.7.0 – v1.7.12	July 2026	Serje ta' rilaxx Fluxheim 1.7: metadata ta' cache, prokura u respons-digest ibbażati fuq standards opt-in; reload u rollback awtentikati ta' snapshot live; evidenza riproduċibbli FIPS-backend; aġġornamenti tal-proċess mingħajr waqfien; Eżempji ta 'politika Wasm ittestjati b'mod indipendenti; u cache aktar b'saħħitha, TLS, buffering, stream, u konfini tal-protokoll.	Kollox fuq GitHub
v1.6.0 – v1.6.37	Ġunju 2026	Linja ta’ native-runtime cutover u tindif: pedamenti ta’ ħruġ minn Pingora, mogħdijiet HTTP/1 u HTTP/2 proprjetà ta’ Fluxheim, previews native TLS/listener, parità route proxy/static-web, kompressjoni u paġni ta’ żball, forwarded-header policy, auth-request, traffic mirroring, rate limits, validazzjoni gRPC, pooled upstream HTTP/2, tindif native proxy wara cutover, tindif finali tal-konfini crate qabel Wasm, Rust 1.96.1, OpenSSL stream TLS imwebbes, zeroization tal-kont ACME u moduli runtime iżgħar u aktar iffukati.	Kollox fuq GitHub
v1.5.0 - v1.5.23	Ġunju 2026	Enterprise load-balancer u runtime-ownership line: focused load-balancer binaries/images, runtime member u weight kontrolli, ġestit affinity cookies, stream u HTTP boundary work, active u protocol-aware saħħa kontrolli, service discovery, kompitu fl-isfond ownership, cache crate boundaries, UDP beta guardrails, origin-protection budgets, ARM/macOS assets, u broad sigurtà hardening.	Kollox fuq GitHub
v1.4.0 – v1.4.7	Mejju 2026	Proxy operations line b’ production proxy parity, richer rotta politika, mirroring tat-traffiku, dynamic upstream discovery, modular runtime/config split, Apple Silicon u Linux ARM64 ħarġa assets, GeoIP/Geo-Context, config-tester archives, u imwebbes TCP stream proxying	Kollox fuq GitHub
v1.3.0 – v1.3.7	Mejju 2026	PHP-FPM production line, ġestit php-fpm supervision, config tester u ACME companion binaries, FIPS/ISO validation tracks, focused cache/proxy profili, u sigurtà hardening	Kollox fuq GitHub
v1.2.0 – v1.2.6	Mejju 2026	Cache u observability baseline b’ rotta-scoped cache politika, memorja/diska/tiered backends, encrypted diska cache, peer fill, range caching, Prometheus, u OpenTelemetry export	Kollox fuq GitHub
v1.1.x	2026	Ċertifikat operations line b’ TLS politika profili, multi-ċertifikat rustls SNI, ACME ġestit issuance u renewal, EAB-capable issuers, fajl-backed TLS sigrieti, u renewal units	Kollox fuq GitHub
v1.0.0	2026	Gateway foundation b’ vhost routing, rotta-level static/proxy/redirect actions, fajl statiku servizz, reverse proxying, rustls TLS, admin kontroll-plane, secure headers, systemd packaging, u mingħajr root kontenituri	GitHub
v0.5.0	Qabel ir-rilaxx	First pubbliku pre-ħarġa milestone qabel the stabbli 1.x gateway line	GitHub

See Reġistru tal-bidliet għal detailed noti tal-ħarġa.