Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Caddy 0.10 Released

caddyserver.com

Post reply on HN
Print view View original

51–60 of 128 posts

Re: Caddy 0.10 Released

#51

Post by rrdharan »

bauerd wrote: post #21
overcast wrote: post #16

So far I'm loving Caddy. Super simple to configure, and the auto management of SSL certificates is magical. However, for all of the simplicity, they are still pretty resistant to properly packaging it up in the repositories. By far the longest part of getting it running, is the stupid manual configuration of launch daemons, working directories, and permissions. For software that prides itself on dead simple managemen…

>the basics of getting it into a package manager should not even be a discussion. Last time I looked into it, their problem was that Caddy plugins must be configured at compile-time, because runtime plugins seem to be hard to do with Golang (besides RPC). Because there's a handful of Caddy plugins, they'd either have to provide a slim package with no plugins, or ship with all or only some blessed plugins. Obviously a…

golang somewhat recently gained dynamic plugin support; wonder if that can be leveraged in Caddy?

https://beta.golang.org/pkg/plugin/

Re: Caddy 0.10 Released

#52

Post by zalmoxes »

cdnsteve wrote: post #49

Does Caddy have a pluggable extension set where you can write your own middleware, in Go?

It does and it's documented on the wiki. I've written a few plugins privately, like implementing SCEP into caddy and adding a few other features.

Due to the nature of the plug system, you'll have to build caddy yourself if you add customizations like that.

Re: Caddy 0.10 Released

#55

Post by doublerebel »

bpierre wrote: post #41

How does it compare with https://traefik.io/ (reverse proxy, written in Go, automatic HTTPS / letsencrypt) ?

Yep, I use the similar eBay/fabio which pulls my LE certs from hashicorp/vault, much better than leaving them in a filesystem. Can't imagine using a proxy/ingress/LB without automatic reactive routing these days. All I have to tell Fabio is what interface to listen to.

Re: Caddy 0.10 Released

#56

Post by mholt »

jbergstroem wrote: post #35

I would just like to bring up how much I admire the way they want to profit off Caddy[1][2]. Sponsorships and focused development; followed by "remember, caddy is open source". My only feedback would be that they introduce a "$50/mo; my bank is not big enough" for people that wants to endorse their model/software. Look at nginx, where new functionality is hidden behind a paywall. I don't want to deny them [nginx devs…

Thanks for the feedback! We are mindful of people who want to contribute funds but aren't able to because of the price. We get a lot of requests for stickers and T-shirts and even jackets/sweaters; so we might go that route for individuals being able to contribute.

Re: Caddy 0.10 Released

#57

Post by doublerebel »

nzjrs wrote: post #45

Anyone with experience using this as a dynamic reverse proxy - I need to proxy certain requests to private container (ports) where the port isn't known until the container is booted, and containers come up and down as users require them.

eBay/fabio or Traefik.io both fit that description. Linkerd and Envoy probably do too but I have less experience with those.

Re: Caddy 0.10 Released

#58

Post by mholt »

haarts wrote: post #34

They mention that 'Default Timeouts' have been disabled. Urging users to 'Act according to your threat model!'. I'm not sure I understand. How is not having these timeouts a security thread? Someone could potentially open up enough HTTP connections to starve others from having the opportunity to do so?

This is true; but slowloris attacks don't require opening as many connections. We've seen one or two instances where buggy (or malicious?) clients were slowlorising Caddy instances; but we were too eager to enable timeouts by default I think.

Re: Caddy 0.10 Released

#59

Post by finid »

singlow wrote: post #25
bauerd wrote: post #21

Earlier quoted context omitted.

>the basics of getting it into a package manager should not even be a discussion. Last time I looked into it, their problem was that Caddy plugins must be configured at compile-time, because runtime plugins seem to be hard to do with Golang (besides RPC). Because there's a handful of Caddy plugins, they'd either have to provide a slim package with no plugins, or ship with all or only some blessed plugins. Obviously a…

Nginx had the same issue. Ubuntu ships 3 or 4 versions - nginx-light, nginx, nginx-full, nginx-extras - for different numbers of modules included.

With dynamic modules support now in Nginx, that practice should end.

Re: Caddy 0.10 Released

#60

Post by CSDude »

rrdharan wrote: post #51
bauerd wrote: post #21

Earlier quoted context omitted.

>the basics of getting it into a package manager should not even be a discussion. Last time I looked into it, their problem was that Caddy plugins must be configured at compile-time, because runtime plugins seem to be hard to do with Golang (besides RPC). Because there's a handful of Caddy plugins, they'd either have to provide a slim package with no plugins, or ship with all or only some blessed plugins. Obviously a…

golang somewhat recently gained dynamic plugin support; wonder if that can be leveraged in Caddy? https://beta.golang.org/pkg/plugin/

Yes, but at the moment its only Linux
Post reply on HN