Live data from Hacker News

Kamal Proxy – A minimal HTTP proxy for zero-downtime deployments

github.com

131–133 of 133 posts

Re: Kamal Proxy – A minimal HTTP proxy for zero-downtime deployments

#131
post #110

Earlier quoted context omitted.

Ah, I was more referring to why this tool was released and wanted to say it’s a component of their Kamal deployment tool and not so important on its own. There’s some more explanation on why they decided to switch away from Traefik: https://github.com/basecamp/kamal/pull/940

> There’s some more explanation on why they decided to switch away from Traefik: Unfortunately no. I posted my comment after reading that PR. It says nothing of substance, and presents no justification. The case to roll out their own is summarized in this claim: > No need for cordfiles, which were a hack used to stop Traefik from sending request to a container to make it unhealthy. Kamal-proxy just sends traffic wher…

I'm not arguing for Kamal, but just to let you know you fell in to the trap of disregarding a sentence you didn't understand. You quote "no need for cordfiles...just sends traffic" but then you write a response as if they didn't just explain to you why Traefic doesn't just send traffic where you tell it to.

Re: Kamal Proxy – A minimal HTTP proxy for zero-downtime deployments

#132
post #127

Earlier quoted context omitted.

I doubt that 37signals themselves are using Kamal's new automatic SSL support, at least in their main apps, since they're running their apps behind Cloudflare. I'd love to see a deployment tool that's like Kamal, in that it's simpler than Kubernetes, but fronted by something mature like Caddy, that can be exposed directly to the Internet rather than running behind a CDN like Cloudflare.

My understanding is that even if you run behind Cloudfare, you need to secure your connection to Cloudfare with a certificate?

That's an option that Cloudflare gives you in the panel.

I wouldn't run my Web apps without something like Cloudflare in front; it's great for DDoS, WAF, Rate Limiting, so on.

Assuming that, I just use the Cloudflare-signed certificate and configure that in my Nginx. It's really easy to do and it expires in 20 years or something.

Re: Kamal Proxy – A minimal HTTP proxy for zero-downtime deployments

#133

It's an interesting choice to make this a whole app, when the zero-downtime deployments can be achieved with other servers trivially these days. For example any app+web proxy which supports Unix sockets can do zero-downtime by moving the file. It's atomic and you can send the warm-up requests with curl. Building a whole system with registration feels like an overkill.

Do you mind expanding on this method? If it have articles you could share I would love to learn more about this.
Post reply on HN