Panuràmica
Na taliata a comu pari Fluxheim in nu deployment production.
Reverse proxy modulare, cache, load balancer e host statico scrittu n Rust. Sicuru di default cu TLS, ACME, compression, edge policy, dynamic upstream discovery e traffic mirroring sicuru.
include_conf_d = false
[server]
listen = ["0.0.0.0:80"]
tls_listen = ["0.0.0.0:443"]
default_vhost = "fluxheim.eu"
[tls]
enabled = true
backend = "rustls"
profile = "intermediate"
min_protocol = "tls1.2"
alpn = "http1-and-http2"
curve_preferences = ["X25519", "CurveP256", "CurveP384"]
[[vhosts]]
name = "fluxheim.eu"
hosts = ["fluxheim.eu"]
[vhosts.tls]
enabled = true
[vhosts.tls.certificate]
cert_path = "/etc/fluxheim/tls/fluxheim.eu/fullchain.pem"
key_path = "/etc/fluxheim/tls/fluxheim.eu/privkey.pem"
[vhosts.web]
root = "/srv/sites/fluxheim.eu"
index_files = ["index.html"]Fluxheim veni distribbuitu comu build focalizzati e modulari: usa sulu chiddu ca servi ô to deployment.
Scrittu n Rust cu toolchain stabile fissata. Nuddu buffer overflow, use-after-free o data race pi custruzzioni.
Runtime edge Rust-native cu connection pooling, upstream retry, health check attivi, HTTP/2, upgrade WebSocket e gRPC pass-through.
Build Wasm apposta, basatu supra lu prufilu cumpletu di pruduzzioni, cu hook di pulìtica limitati, ACME, mètrichi e OpenTelemetry.
Binary e image load-balancer 1.5 focalizzati cu advanced selection, persistenza lucali, health/ejection policy, code bounded e runtime member controls.
Compila sulu chiddu ca ti servi. Profili focalizzati pi sito statico, cache edge, reverse proxy, load balancing, TCP stream proxying, PHP-FPM, GeoIP, traffic mirroring e bundle production cu compression.
Approccio rustls-first cu percorsi build OpenSSL e FIPS/ISO supportati, client certificate auth, upstream mTLS, emissioni ACME automatica e multi-cert SNI.
Backend cache memory, disk, tiered ed encrypted cu compression gzip, Zstandard e Brotli cache-safe cchiù range caching pi oggetti grandi.
Image Podman rootless pi Wolfi, Alpine, SUSE Micro e Debian. Systemd/RPM pi deployment nativi. Nuddu asset esternu â partenza.
Listener metrics Prometheus opt-in, export OTLP metrics, propagazione trace context ed export OTLP trace pi observability cumpleta.
Lookup MMDB lucali opziunali pi policy paisi e ASN cu dataset MaxMind GeoIP2/GeoLite2 o CIRCL Geo Open. Nuddu lookup rimotu o downloader ntô request path.
Servizi TCP L4 raw cu stream route dedicate, veri cap idle/lifetime/byte, controlli upstream TLS/mTLS, policy weighted/drain/backup e PROXY protocol lucali â route.
Bridge PHP-FPM FastCGI opt-in pi applicazioni front-controller stile WordPress. Risoluzione script rigorosa e gestioni request bounded.
ACL trusted-proxy-aware, rate limit, auth subrequest, traffic mirroring, regex rewrite, code bounded, config validation rigorosa e request handling hardened.
Download a pre-built binary, drop in a config file, and start serving. Native systemd units and container images included.
# Scàrrica ed estrai a build cumpleta
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
| tar xz
# Sposta u binario nel percorso di sistema
sudo mv fluxheim /usr/local/bin/
# Valida a cunfigurazzioni prima di avviare
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml
# Esegui cu systemd (unit file incluso)
sudo systemctl enable --now fluxheim# Scàrrica da GHCR o Quay
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0
# Esegui rootless cu a tua cunfigurazzioni montata
podman run -d \
--name fluxheim \
-p 8080:8080 -p 8443:8443 \
-v /srv/sites:/srv/sites:ro \
-v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
ghcr.io/valkyoth/fluxheim:v1.8.0
# Varianti image disponibili: full, load-balancer, cache, proxy, wasm, php# Clona e compila u profilo pridifinitu
git clone https://github.com/valkyoth/fluxheim
cd fluxheim
# Build pridifinuta (proxy + web + cache + tls-rustls + security)
cargo build --release
# Oppure compila nu profilo mirato
cargo build --release --no-default-features \
--features profile-proxy-edge,acme-client
# Valida a cunfigurazzioni ed esegui
cargo run --release -- \
--check-config --config examples/fluxheim.tomlCriatu pi operatori ca vonnu nu stack mudernu e auditabbili senza cumpurtamentu legacy ammucciatu.
La config validation è rigorusa. Opzioni ambigui o insicuri vennu rifiutati, nun accittati n silenziu.
Build ripruducìbbili. Ogni dependency è fissata. cargo audit and cargo deny run in CI.
Esegui senza root. Porti nterni 8080/8443 di default. Image runtime esplicite pi policy operative diverse.
Licenza copyleft cumpatìbbili cu tanti licenzi OSS. Origini UE, chiara legalmenti pi usu governativu ed enterprise.
Na taliata a comu pari Fluxheim in nu deployment production.