News for hackers. Stuff that matters.
Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by snorremd on Friday September 14, 2018 @03:33AM (#17985383)
Træfik works pretty well as an automated https proxy as well: https://traefik.io/ It is still missing a caching feature though, so it might not be a good fit for everyone. It has a Docker backend which works with Docker labels (much the same way the https-portal project uses environment vars).
Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by Rowern on Friday September 14, 2018 @04:19AM (#17985568)
Traefik is really cool for most usage, I tried to used it in production and here are some of the shortcoming I found (the 2 first issues are on github):

- If you use DNS for a blue-green deployment, traefik does not honor DNS ttls (because it uses the DNS of go and go might do some caching) so when you do the switch you might still end on the "old" environment

- An error on one of the cool feature: serving error page when your backend returns some HTTP code

- Some configuration options are not documented (but easily found using github search)

I still love this software and I will keep looking at it.

Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by dward on Friday September 14, 2018 @11:01AM (#17987649)
By default, go compiles binaries linked to libc to use the system DNS resolver. It does re-implement a DNS resolver but it's only used if CGO is disabled at compilation time.
Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by axaxs on Friday September 14, 2018 @01:41PM (#17989201)
That's only half right. It does link to libc, but the default behavior on linux is to use Go unless some conditions are met.
Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by dward on Wednesday September 26, 2018 @03:46PM (#18079576)
Use go for what? DNS resolution? The default behavior is to use the system DNS resolver. The Go resolver will be used if the system is resolver is not avaialble (e.g. if the binary is compiled as pure go) or if the net.Resolver has the PreferGo flag set (which is false by default).

https://github.com/golang/go/blob/541f9c0345d4ec52d9f4be5913...

Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by mathnmusic on Friday September 14, 2018 @08:41AM (#17986754)
Is it possible for me to dynamically configure Traefik for non-Docker environments? I would like to run a Traefik instance which acts as a https-proxy for arbitrary domains,hosts and ports - without having to restart at all.
Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by tylerjl on Friday September 14, 2018 @03:07PM (#17989957)
As long as you're using one of the dynamic backends that Traefik hooks into, such as Consul for example, you can do this pretty easily.

I do this exact thing with Traefik, Consul, and some various miscellaneous services that don't fall under the dynamically-discovered umbrella when they might run under k8s or nomad. I write a value to Consul with the desired Host: match, a backend server to route requests to, and Traefik will handle routing to any backend server it can reach without restarts or interrupting service.

Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by drewmol on Friday September 14, 2018 @09:47AM (#17987123)
I would ALSO like to run a Traefik instance which acts as a https-proxy for arbitrary domains,hosts and ports - without having to restart at all.
Re:HTTPS-Portal: Automated HTTPS server powered by Nginx, Le... by docsapp_io on Friday September 14, 2018 @06:54AM (#17986204)
We are using Traefik with k8s with great success in production. They start to provide commercial support, which is great for enterprise.