總覽
Fluxheim 在生產部署中的外觀概覽。
Modular 反向代理, 快取, 負載平衡器, and static host written in Rust. 預設安全 with TLS, ACME, compression, edge policy, dynamic 上游 discovery, and 安全 流量 mirroring built in.
include_conf_d = false
[server]
listen = ["0.0.0.0:80"]
tls_listen = ["0.0.0.0:443"]
default_vhost = "fluxheim.eu"
[tls]
enabled = true
backend = "rustls"
profile = "intermediate"
min_protocol = "tls1.2"
alpn = "http1-and-http2"
curve_preferences = ["X25519", "CurveP256", "CurveP384"]
[[vhosts]]
name = "fluxheim.eu"
hosts = ["fluxheim.eu"]
[vhosts.tls]
enabled = true
[vhosts.tls.certificate]
cert_path = "/etc/fluxheim/tls/fluxheim.eu/fullchain.pem"
key_path = "/etc/fluxheim/tls/fluxheim.eu/privkey.pem"
[vhosts.web]
root = "/srv/sites/fluxheim.eu"
index_files = ["index.html"]Fluxheim ships as focused, 模組化 builds — use only what your deployment needs.
用 Rust 編寫 with a pinned stable toolchain. No buffer overflows, no use-after-free, no data races by construction.
A Rust-native edge runtime with connection pooling, 上游 retries, active 健康檢查, HTTP/2, WebSocket upgrades, and gRPC pass-through.
以完整生產設定檔為基礎嘅專用 Wasm 組建，設有限定範圍嘅政策掛接點，並支援 ACME、指標同 OpenTelemetry.
專注於 1.5 負載平衡器二進位檔案和映像，具有進階選擇、本地持久性、運行狀況/彈出策略、有界佇列和運行時成員控制。
只編譯你需要嘅嘢。靜態網站、快取邊緣、反向代理、負載平衡、 TCP 流代理、 PHP-FPM 、 GeoIP 、流量鏡像同埋支援壓縮嘅生產捆綁嘅集中設定檔。
rustls-first with supported OpenSSL and FIPS/ISO proof build paths, client certificate auth, 上游 mTLS, automatic ACME issuance, and multi-cert SNI.
Memory, disk, tiered, and encrypted 快取 後端s with 快取-安全 gzip, Zstandard, and Brotli compression plus range caching for large objects.
適用於 Wolfi、Alpine、SUSE Micro 和 Debian 的無根 Podman 映像。用於本機部署的 Systemd/RPM。啟動時外部資產為零。
Opt-in Prometheus 指標 listener, OTLP 指標 export, trace context propagation, and OTLP trace export for full 可觀測性.
可選嘅本機 MMDB 查詢，用於國家同 ASN 政策，支援 MaxMind GeoIP2/GeoLite2 或 CIRCL Geo Open 資料集。請求路徑入面唔會做遠端查詢，亦唔會有下載器。
Raw L4 TCP services with dedicated stream routes, true idle/lifetime/byte caps, 上游 TLS/mTLS controls, weighted/drain/backup policy, and route-local PROXY protocol.
Opt-in PHP-FPM FastCGI bridge for WordPress-style front-controller applications. Strict script resolution and bounded 請求 handling.
Trusted-proxy-aware ACLs, rate limits, auth sub請求, 流量 mirroring, regex rewrites, bounded queues, strict config validation, and hardened 請求 handling.
Download a pre-built binary, drop in a config file, and start serving. Native systemd units and container images included.
# 下載並解壓完整 build
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
| tar xz
# 將二進位檔案移到系統路徑
sudo mv fluxheim /usr/local/bin/
# 開始之前驗證您的配置
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml
# 執行 with systemd (included unit file)
sudo systemctl enable --now fluxheim# 從 GHCR 或碼頭出發
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0
# 執行 rootless with your config mounted
podman run -d \
--name fluxheim \
-p 8080:8080 -p 8443:8443 \
-v /srv/sites:/srv/sites:ro \
-v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
ghcr.io/valkyoth/fluxheim:v1.8.0
# 可用映像版本：full、load-balancer、快取、proxy、wasm、php# 克隆並建立預設配置文件
git clone https://github.com/valkyoth/fluxheim
cd fluxheim
# Default build (proxy + web + 快取 + tls-rustls + 安全)
cargo build --release
# 或建立一個有針對性的個人資料
cargo build --release --no-default-features \
--features profile-proxy-edge,acme-client
# 驗證 config and run
cargo run --release -- \
--check-config --config examples/fluxheim.toml專為想要現代化、可審計堆疊且沒有隱藏遺留行為的操作員而建構。
設定 validation is strict. Ambiguous or insecure options are rejected, not silently accepted.
可重複的構建。每個依賴項都被固定。 cargo audit and cargo deny run in CI.
執行 without root. Internal ports 8080/8443 by default. Explicit runtime images for different operational policies.
Copyleft 許可證與許多 OSS 許可證相容。源自歐盟，法律明確可供政府和企業使用。
Fluxheim 在生產部署中的外觀概覽。