convox / proxy Goto Github PK

View Code? Open in Web Editor NEW

5.0 5.0 2.0 10 KB

Simple TCP proxy to simulate TLS and PROXY protocol locally

Home Page: https://convox.com

Go 89.93% Makefile 3.21% Shell 6.85%

proxy's Introduction

Convox

Convox is an open-source PaaS based on Kubernetes available for multiple cloud providers.

Supported Clouds

Amazon Web Services
Digital Ocean
Google Cloud
Microsoft Azure

Getting Started

Introduction

Installation

Features

Release Management
Secrets Management
Load Balancing (automatic SSL)
Service Discovery
Resource Management (Postgres, Redis, etc)
Automated Rollbacks
Autoscaling
Scheduled Runs (cron)
One-off Commands

Resources

Development Tips

When testing new changes, a good way of adding them to a test rack is to build the image locally,push to a public repo and update the k8s deployment api:

docker build -t user/convox:tag .
docker push user/convox:tag
kubectl set image deploy api system=user/convox:tag -n rackName-system

If testing new changes in terraform, install the rack using the following command to have the /terraform folder mapped to the rack tf manifest.

/convox: CONVOX_TERRAFORM_SOURCE=$PWD//terraform/system/%s convox rack install aws rack1

After saving your changes, go to (Linux:~/.config/convox/racks/rack1 or OSX:/System/Volumes/Data/Users/$PROFILENAME/Library/Preferences/convox/racks and run terraform apply

License

Apache 2.0

proxy's People

Contributors

Stargazers

Watchers

Forkers

jordansexton bladealslayer

proxy's Issues

HTTPS proxy dies during first request

I'm running into issues w/ using the HTTPS proxy locally.

docker-compose.yml:

web:
  build: .
  command: actions/web.sh
  environment:
    - DEVELOPMENT_MODE=true
    - WEB_CONCURRENCY=1
  labels:
    - convox.port.7001.protocol=https
  ports:
    - 7001:80
  links:
    - redis
redis:
  image: convox/redis
  ports:
    - 6380

The proxy container dies immediately when I make a request to it (/bin/sh terminated instantly on first request as well):

michaelwarkentin@mwarkentin cheques (JNO-98-docker) ~~ $ docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED              STATUS              PORTS                              NAMES
a2180552ee64        cheques/web         "sh -c actions/web.sh"   About a minute ago   Up About a minute   0.0.0.0:48987->80/tcp              cheques-web
b18f3403b352        convox/proxy        "proxy 7001 172.17.0."   About a minute ago   Up About a minute   0.0.0.0:7001->7001/tcp             awesome_wing
5d12100d75e3        cheques/redis       "/docker-entrypoint.s"   About a minute ago   Up About a minute   6379/tcp, 0.0.0.0:6380->6380/tcp   cheques-redis
michaelwarkentin@mwarkentin cheques (JNO-98-docker) ~~ $ http https://192.168.99.100:7001

http: error: SSLError: EOF occurred in violation of protocol (_ssl.c:590) while doing GET request to URL: https://192.168.99.100:7001/
michaelwarkentin@mwarkentin cheques (JNO-98-docker) ~~ $ docker ps
CONTAINER ID        IMAGE               COMMAND                  CREATED             STATUS              PORTS                              NAMES
a2180552ee64        cheques/web         "sh -c actions/web.sh"   2 minutes ago       Up 2 minutes        0.0.0.0:48987->80/tcp              cheques-web
5d12100d75e3        cheques/redis       "/docker-entrypoint.s"   2 minutes ago       Up 2 minutes        6379/tcp, 0.0.0.0:6380->6380/tcp   cheques-redis

Proxy seems to be running inside the container:

/go/src/github.com/convox/proxy # ps
PID   USER     TIME   COMMAND
    1 root       0:00 proxy 7001 172.17.0.1:59850 https
   17 root       0:00 /bin/sh
   23 root       0:00 ps

I’m able to curl my web container from within the proxy container:

/go/src/github.com/convox/proxy # curl -I 172.17.0.1:43379
HTTP/1.1 200 OK
Server: nginx/1.9.9

Not sure how to figure out exactly where things are breaking, but since things seem to run until I make a request, it's likely further down in the stack from here: https://github.com/convox/proxy/blob/master/main.go#L73

Support user-supplied SSL cert instead of creating a self-signed cert on start

This would enhance the developer experience and security, since there would be no need to trust a self-signed certificate every time convox start is executed (which can happen dozes of times per day).

proxy-link script assumes legacy Docker links

The proxy-link script assumes legacy Docker links, i.e. that environment variables in the form <alias>_PORT_<port>_TCP_ADDR and <alias>_PORT_<port>_TCP_PORT are defined, which is not the case with non-default docker networks: https://docs.docker.com/engine/userguide/networking/work-with-networks/#linking-containers-in-user-defined-networks