fabio
vkv
Our great sponsors
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
fabio
-
Replicating and Load Balancing Go Applications in Docker Containers with Consul and Fabio
After some research and testing, I landed on using Consul and Fabio as the demo infrastructure. Of course, there is a myriad of other options to accomplish this task, but because of the low configuration and ease of use, I was impressed with this pairing. Both projects are mature and well-supported, and very flexible--just because you can run them with low configuration, doesn't mean you have to. I wanted to keep this demo constrained, but the exercise did get me excited about exploring things further: circuit breakers, traffic splitting, and more complex service meshes.
-
Why TLS is better without STARTTLS (2021)
Sniffing the SNI from the underlying TCP connection is the proper way to do this.
a couple examples I know of(only know go ones of the top of my head):
https://github.com/fabiolb/fabio/blob/master/proxy/tcp/tls_c...
- Deploy without interrupting clients is hard.
-
HashiCorp Consul: What's the catch?
HAProxy, Traefik, FabioLB, gobetween, and F5 BIG-IP also support native integrations with Consul for service discovery / service mesh.
-
My favorite hosting stack: Consul, Nomad and Vault on Digital Ocean
Check out https://github.com/fabiolb/fabio instead of traefik, it's 100x simpler and "just works". Traefik... I don't like traefik. Fabio is as simpler than traefik in the same way that the hashistack is simpler than k8s.
-
internal naming conventionds
I use Hashicorp Consul and Hashicorp Nomad for service discovery and task scheduling respectively, with wesher for my internal private management network that Consul, Nomad, etc run on to protect the management interfaces. Fabio bridges the gap between the wesher wireguard VPN and the rest of my home network.
vkv
-
Directory Structure of Vault Paths
This might help: https://github.com/FalcoSuessgott/vkv
- wrote a small cli for recursively listing secrets from vaults kv engine, thought it may be interesting for you guys
What are some alternatives?
envoy - Cloud-native high-performance edge/middle/service proxy
gobetween - :cloud: Modern & minimalistic load balancer for the Сloud era
medusa - A cli tool for importing and exporting Hashicorp Vault secrets
wesher - wireguard overlay mesh network manager
git2consul - Mirrors the contents of a git repository into Consul KVs.
teller - Cloud native secrets management for developers - never leave your command line for secrets.
b3lb - BigBlueButton Load Balancer
Vault - A tool for secrets management, encryption as a service, and privileged access management
bank-vaults - A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
rvault - Small tool to perform some recursive operations on Hashicorp's Vault KV
gateway - A federated api gateway for graphql services. https://gateway.nautilus.dev/
CoreFX - This repo is used for servicing PR's for .NET Core 2.1 and 3.1. Please visit us at https://github.com/dotnet/runtime