News for hackers. Stuff that matters.
Re:Kubernetes egress control with squid proxy by lkglglgllm on Monday December 29, 2025 @01:05PM (#46423395)
How hard would this be in nginx/traefik/envoy/caddy/river/varnish?
Re:Kubernetes egress control with squid proxy by fsmunoz on Monday December 29, 2025 @01:32PM (#46423724)
Depends on what you want, I touch upon that somewhat: to replicate this specific pattern, you can replace Squid with something that fills in the gap without any major changes - so, nginx or Caddy for example -- but you would have to make sure the feature set is adequate: I see Squid as being egress-first, where others are ingress-first (nginx being used a an ingress controller, recently discontinued but still...), so I do think that for this specific purpose it works quite well.

As for Envoy and others, I think this would fit in a different architecture that I sort of point to near the end, one that includes using a service mesh: Istio for example uses Envoy for Egress Gateway, Cillium also has an Egress Gateway, etc. This to me would be a separate pattern though.