Najnovejša stabilna — v1.8.0

Download Fluxheim

Vnaprej zgrajeni Linux binarni paketi za x86_64 in ARM64 ter macOS razvojni buildi. Izdano 23. julija 2026.

polni Priporočeno

Polni production build

Svi stabilni production moduli: proxy, web, cache, compression, load balancing, raw TCP stream proxying, TLS (rustls), PHP-FPM, ACME client, GeoIP/Geo-Context, security hardening, metrics in OpenTelemetry.

Static serving s reverse proxy in PHP-FPM

Cache backendi (memory, disk, tiered)

gzip, zstd in Brotli compression

TLS in managed ACME renewal

Local GeoIP country/ASN kontekst

Hardened TCP stream proxying način

Prometheus in OpenTelemetry

~10.3 MB binary

x86_64 ARM64

Load balancer Novo

Load Balancer Edge profil

Osredotočeni HTTP/TCP load-balancer build brez cache, static web, PHP, GeoIP, stream proxying ali traffic mirroring.

Advanced pool selection

Drain, disable, force-down operacije

Hardened LB core dio

TLS in managed ACME renewal

x86_64 ARM64

PHP Managed PHP-FPM način

PHP application build

Static web + reverse proxy + PHP-FPM FastCGI bridge. Idealno za WordPress in PHP front-controller apps. Cache module nije kompajliran.

PHP-FPM FastCGI bridge put

Static asset serving iz istog root

TLS in managed ACME renewal

~8.9 MB binary

x86_64 ARM64

Cache edge

Cache Edge build

Osredotočeni cache edge brez local static web serving. Uključuje proxy, cache, compression, TLS in ACME. Idealno za CDN-style deployment.

Reverse proxy s cache

Cache-safe compression controls skup

TLS in managed ACME renewal

Static web module nije kompajliran

~6.8 MB binary

x86_64 ARM64

Proxy edge

Proxy Edge build

Osredotočeni reverse proxy brez cache, static web ali namjenskog load-balancer module. Dizajniran za pure reverse-proxy deployment s TLS, ACME, compression in upstream resilience.

Samo reverse proxy

ACL, rate limits, retries, health checks

TLS in managed ACME renewal

Cache ali web modul nista kompilirana

~5.8 MB binary

x86_64 ARM64

Wasm Novo

Produkcijska različica Wasm

Namenska različica Wasm na podlagi celotnega produkcijskega profila z omejenimi programskimi kavlji, ACME, metrikami in OpenTelemetry.

Static serving s reverse proxy in PHP-FPM

Cache backendi (memory, disk, tiered)

WASM ekstenzije

TLS in managed ACME renewal

Prometheus in OpenTelemetry

x86_64 ARM64

Platform Downloads

Production Linux builds plus Level 1 macOS developer tarballs.

macOS je samo za developer testing

Build profil	Linux x86_64	Linux ARM64	macOS razvoj
polni	x86_64-linux	aarch64-linux	Apple Silicon
Wasm	x86_64-linux	aarch64-linux	Apple Silicon
PHP	x86_64-linux	aarch64-linux	-
Load balancer	x86_64-linux	aarch64-linux	-
Cache edge	x86_64-linux	aarch64-linux	-
Proxy edge	x86_64-linux	aarch64-linux	-
Config tester alat	x86_64-linux	aarch64-linux	-

Namestitev

bash — tarball instalacija

# 1. Prenesi polni Linux build tarball
# Na ARM64 serverima uporablja aarch64-linux umjesto x86_64-linux.
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
  -o fluxheim-1.8.0.tar.gz

# 2. Preveri in razširi
tar xzf fluxheim-1.8.0.tar.gz

# 3. Premjesti binary in helper tools v system path
sudo mv fluxheim /usr/local/bin/
sudo mv fluxheim-acme /usr/local/bin/            # ACME companion alat
sudo mv fluxheim-config-tester /usr/local/bin/   # Config validator alat

# 4. Stvori config directory in dodaj svoj config
sudo mkdir -p /etc/fluxheim /srv/fluxheim
sudo cp packaging/default/fluxheim.toml /etc/fluxheim/fluxheim.toml

# 5. Validiraj config
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml

# 6. Zaženi izravno (ili vidi Systemd tab za service setup)
sudo fluxheim --config /etc/fluxheim/fluxheim.toml

bash — rootless Podman pokretanje

# Prenesi GHCR image (Wasm, full, load-balancer, cache, proxy in PHP varijante)
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0         # polni
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-load-balancer # load balancer profil
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-cache   # cache edge profil
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-proxy   # proxy edge profil
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-php     # upravljani PHP-FPM

# Isti build set dostupan je na Quay
podman pull quay.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull quay.io/valkyoth/fluxheim:v1.8.0-load-balancer
podman pull quay.io/valkyoth/fluxheim:v1.8.0-cache
podman pull quay.io/valkyoth/fluxheim:v1.8.0-proxy
podman pull quay.io/valkyoth/fluxheim:v1.8.0-php

# Zaženi rootless — interni porti 8080 in 8443
podman run -d \
  --name fluxheim \
  --restart unless-stopped \
  -p 8080:8080 \
  -p 8443:8443 \
  -v /srv/sites:/srv/sites:ro \
  -v /srv/fluxheim/certs:/etc/fluxheim/certs:rw \
  -v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
  ghcr.io/valkyoth/fluxheim:v1.8.0

# Provjeri log
podman logs -f fluxheim

bash — systemd service postava

# Tarball uključuje hardened systemd unit
sudo cp packaging/systemd/fluxheim.service /etc/systemd/system/

# Stvori fluxheim system user
sudo useradd -r -s /sbin/nologin -d /var/lib/fluxheim fluxheim

# Pripremi directory
sudo mkdir -p /etc/fluxheim /srv/fluxheim /var/log/fluxheim
sudo chown fluxheim:fluxheim /srv/fluxheim /var/log/fluxheim

# Reload systemd in olahkoći service
sudo systemctl daemon-reload
sudo systemctl enable --now fluxheim

# Provjeri status
sudo systemctl status fluxheim
sudo journalctl -u fluxheim -f

Napomena: Paketirani systemd unit uporablja CAP_NET_BIND_SERVICE tako da Fluxheim lahko bind na portove 80 in 443 brez rada kot root. Unit file uključuje security hardening options.

bash — managed ACME certificate izdavanje

# Fluxheim uključuje acme-init za vođeni setup certifikatov
# Let's Encrypt issuer (HTTP-01)
sudo fluxheim acme-init letsencrypt

# Actalis (besplatan EAB-capable issuer)
sudo fluxheim acme-init actalis

# Companion tool fluxheim-acme upravlja renewals za
# kontejner in external service-manager deployment
fluxheim-acme status
fluxheim-acme renew
fluxheim-acme reload

fluxheim.toml — ACME konfiguracija

[[vhosts]]
name = "site"
hosts = ["example.com", "www.example.com"]

[vhosts.tls]
enabled = true

[vhosts.tls.acme]
enabled = true
# issuer postavka: issuer = "letsencrypt"

Puna TLS in ACME dokumentacija →

Sistemski zahtjevi

Podržane platforme

Linux x86_64 (kernel 4.14+)
Linux ARM64 / aarch64
samo macOS developer binary

Container image

Svi release image buildi objavljeni su na GHCR i Quay.

Wolfi (minimalan, hardened)
Full, load-balancer, cache, proxy in PHP image profiles
Alpine Linux
SUSE Micro
Debian
Objavljeno na GHCR in Quay

All Releases

Poglej vse na GitHubu →

Verzija	Datum	Najvažnije	Prenosi
v1.8.0 Najnovejše	July 2026	Namenska različica Wasm na podlagi celotnega produkcijskega profila z omejenimi programskimi kavlji, ACME, metrikami in OpenTelemetry. Dodaja ustrezne arhive tar.gz in ZIP, vključno z nativnimi polnimi različicami in različicami Wasm za macOS. Krepi meje polnjenja predpomnilnika, predpomnilnika obsegov in sprejema Wasm za posameznega navideznega gostitelja.	Vse na GitHubu
v1.7.0 – v1.7.12	July 2026	Serija izdaj Fluxheim 1.7: predpomnilnik, proxy in metapodatki izvlečka odziva, ki temeljijo na izbirnih standardih; ponovno nalaganje posnetka v živo in povrnitev nazaj; ponovljivi FIPS-backend dokazi; nadgradnje procesov brez izpadov; neodvisno testirani primeri politike Wasm; in močnejši predpomnilnik, TLS, medpomnjenje, tok in meje protokola.	Vse na GitHubu
v1.6.0 – v1.6.37	lipanj 2026.	Linija native-runtime cutoverja in čiščenja: temelji izhoda iz Pingora, HTTP/1 in HTTP/2 poti v lasti Fluxheima, native TLS/listener predogledi, pariteta route proxy/static-web, stiskanje in strani z napakami, politika forwarded-header, auth-request, zrcaljenje prometa, rate limits, validacija gRPC, poolan upstream HTTP/2, čiščenje native proxy po cutoverju, končno čiščenje meja crate pred Wasm, Rust 1.96.1, utrjen OpenSSL stream TLS, zeroizacija računa ACME in manjši osredotočeni runtime moduli.	Vse na GitHubu
v1.5.0 - v1.5.23	lipanj 2026.	Enterprise load-balancer in runtime-ownership linija: fokusirani load-balancer binary/image, runtime member in weight controls, managed affinity cookies, stream in HTTP boundary work, active in protocol-aware health checks, service discovery, background task ownership, cache crate boundaries, UDP beta guardrails, origin-protection budgets, ARM/macOS assets in širok security hardening.	Vse na GitHubu
v1.4.0 – v1.4.7	svibanj 2026.	Proxy operations linija s production proxy parity, bogatejšo route policy, traffic mirroring, dynamic upstream discovery, modular runtime/config split, Apple Silicon in Linux ARM64 release assets, GeoIP/Geo-Context, config-tester archives in hardened TCP stream proxying	Vse na GitHubu
v1.3.0 – v1.3.7	svibanj 2026.	PHP-FPM production linija, managed php-fpm supervision, config tester in ACME companion binary, FIPS/ISO validation tracks, fokusirani cache/proxy profile in security hardening	Vse na GitHubu
v1.2.0 – v1.2.6	svibanj 2026.	Cache in observability baseline s route-scoped cache policy, memory/disk/tiered backend, encrypted disk cache, peer fill, range caching, Prometheus in OpenTelemetry export	Vse na GitHubu
v1.1.x	2026	Certificate operations linija s TLS policy profile, multi-certificate rustls SNI, managed ACME issuance in renewal, EAB-capable issuers, file-backed TLS secrets in renewal units	Vse na GitHubu
v1.0.0	2026	Gateway foundation s vhost routing, route-level static/proxy/redirect actions, static file serving, reverse proxying, rustls TLS, admin control-plane, secure headers, systemd packaging in rootless kontejners	GitHub
v0.5.0	Pre-release izdaja	Prvi public pre-release milestone pred stabilne 1.x gateway linije	GitHub

See Dnevnik sprememb za detaljne release notes.