Earlier quoted context omitted.
Ah, I was more referring to why this tool was released and wanted to say it’s a component of their Kamal deployment tool and not so important on its own. There’s some more explanation on why they decided to switch away from Traefik: https://github.com/basecamp/kamal/pull/940
> There’s some more explanation on why they decided to switch away from Traefik: Unfortunately no. I posted my comment after reading that PR. It says nothing of substance, and presents no justification. The case to roll out their own is summarized in this claim: > No need for cordfiles, which were a hack used to stop Traefik from sending request to a container to make it unhealthy. Kamal-proxy just sends traffic wher…
Kamal Proxy – A minimal HTTP proxy for zero-downtime deployments
131–133 of 133 posts
Re: Kamal Proxy – A minimal HTTP proxy for zero-downtime deployments
#132Earlier quoted context omitted.
I doubt that 37signals themselves are using Kamal's new automatic SSL support, at least in their main apps, since they're running their apps behind Cloudflare. I'd love to see a deployment tool that's like Kamal, in that it's simpler than Kubernetes, but fronted by something mature like Caddy, that can be exposed directly to the Internet rather than running behind a CDN like Cloudflare.
My understanding is that even if you run behind Cloudfare, you need to secure your connection to Cloudfare with a certificate?
I wouldn't run my Web apps without something like Cloudflare in front; it's great for DDoS, WAF, Rate Limiting, so on.
Assuming that, I just use the Cloudflare-signed certificate and configure that in my Nginx. It's really easy to do and it expires in 20 years or something.
Re: Kamal Proxy – A minimal HTTP proxy for zero-downtime deployments
#133It's an interesting choice to make this a whole app, when the zero-downtime deployments can be achieved with other servers trivially these days. For example any app+web proxy which supports Unix sockets can do zero-downtime by moving the file. It's atomic and you can send the warm-up requests with curl. Building a whole system with registration feels like an overkill.