reverse-proxy

alkdev/reverse-proxy

Fork 0

Commit Graph

Author	SHA1	Message	Date
glm-5.1	7bed7db615	Wire startup orchestration: correct sequence, middleware order, TLS, ConnectInfo, sd_notify Consolidate startup logic into main.rs following operations.md sequence: 1. Parse/validate config, 2. Init DynamicConfig ArcSwap, 3. Init shared state (rate limiter, clients, logging), 4. Bind health check port, 5. Bind admin socket, 6. Bind all listener ports (HTTP+HTTPS), 7. Load TLS config, 8. Start TCP listeners, 9. Start background tasks, 10. Signal readiness Key changes: - main.rs: Complete startup orchestration with proper sequence, TLS handling, ConnectInfo propagation, sd_notify, graceful shutdown - server.rs: Simplified to just serve_https_listener with shutdown support - proxy/mod.rs: Added build_router() with correct middleware order (rate limiting → body limit → routing → proxy handler)	2026-06-11 13:45:39 +00:00
glm-5.1	7ccb2ae64f	feat: implement multi-listener TLS setup with ConnectInfo propagation - Add server module that orchestrates the full startup sequence: parse config, init dynamic config, init shared state, bind health check, bind admin socket, bind all listener ports, load TLS config, start TCP listeners, start background tasks, signal readiness - For each ListenerConfig: bind TCP listener, construct appropriate ServerConfig (manual or ACME via TlsMode), create TlsAcceptor - ConnectInfo<SocketAddr> populated from TcpStream::peer_addr() BEFORE TLS wrapping via ConnectInfoService wrapper that inserts ConnectInfo into request extensions for each connection - Per-listener axum::Router instances sharing Arc<ProxyState> via State - Fail-fast: if any bind or TLS load fails, exit with non-zero code - All ports bound before any connections accepted - /health endpoint available on HTTPS listener(s) as fallback (proxy_router already includes /health route) - sd_notify(READY=1) sent after all listeners started - Use hyper_util for TLS connection serving with TowerToHyperService and ConnectInfoService to bridge ConnectInfo from pre-TLS peer_addr - Add sd-notify dependency for systemd readiness notification	2026-06-11 13:38:39 +00:00

Author

SHA1

Message

Date

glm-5.1

7bed7db615

Wire startup orchestration: correct sequence, middleware order, TLS, ConnectInfo, sd_notify

Consolidate startup logic into main.rs following operations.md sequence:
1. Parse/validate config, 2. Init DynamicConfig ArcSwap, 3. Init shared state
(rate limiter, clients, logging), 4. Bind health check port, 5. Bind admin
socket, 6. Bind all listener ports (HTTP+HTTPS), 7. Load TLS config,
8. Start TCP listeners, 9. Start background tasks, 10. Signal readiness

Key changes:
- main.rs: Complete startup orchestration with proper sequence, TLS handling,
  ConnectInfo propagation, sd_notify, graceful shutdown
- server.rs: Simplified to just serve_https_listener with shutdown support
- proxy/mod.rs: Added build_router() with correct middleware order
  (rate limiting → body limit → routing → proxy handler)

2026-06-11 13:45:39 +00:00

glm-5.1

7ccb2ae64f

feat: implement multi-listener TLS setup with ConnectInfo propagation

- Add server module that orchestrates the full startup sequence:
  parse config, init dynamic config, init shared state, bind health
  check, bind admin socket, bind all listener ports, load TLS config,
  start TCP listeners, start background tasks, signal readiness
- For each ListenerConfig: bind TCP listener, construct appropriate
  ServerConfig (manual or ACME via TlsMode), create TlsAcceptor
- ConnectInfo<SocketAddr> populated from TcpStream::peer_addr() BEFORE
  TLS wrapping via ConnectInfoService wrapper that inserts ConnectInfo
  into request extensions for each connection
- Per-listener axum::Router instances sharing Arc<ProxyState> via State
- Fail-fast: if any bind or TLS load fails, exit with non-zero code
- All ports bound before any connections accepted
- /health endpoint available on HTTPS listener(s) as fallback
  (proxy_router already includes /health route)
- sd_notify(READY=1) sent after all listeners started
- Use hyper_util for TLS connection serving with TowerToHyperService
  and ConnectInfoService to bridge ConnectInfo from pre-TLS peer_addr
- Add sd-notify dependency for systemd readiness notification

2026-06-11 13:38:39 +00:00

2 Commits