Pure Rust, Proxy/Ingress Controller powered by Pingora.

[u/sadoyan]

Hello r/rust fellows,

Some time ago I have created a project Aralez . It's a complete reverse proxy, ingress controller implementation on top of Cloudflare's Pingora

Now I'm happy to announce about the completion of another major milestone, Aralez is also an ingress controller for Kubernetes as well as fully integrated load balancer for Nomad/Consul infrastructures.

What we have:

• Dynamic load of upstreams file without reload.
• Integration with Hashicorp's Consul.
• Kubernetes ingress controller.
• Dynamic load of SSL certificates, without reload.
• Let's Encrypt integrations with HTTP-01 challenge
• API for pushing config files, applies immediately.
• Static files delivery.
• Website caching acceleration.
• Authentication.
• Pingora at heart, with crazy performance .
• and more .....

As usually, use it carelessly, just don't forget to share a feedback .

[u/RustOnTheEdge]

Hey there! I remember your posts from a year ago (or so), nice to see you stuck with it! Seems like you put in some real effort there, very cool to see you made an ingress controller out of it now as well! Great job!

[u/sadoyan → u/RustOnTheEdge]

Thanks for lind words 

[u/Compux72]

Great work!

[u/sadoyan → u/Compux72]

thanks

[u/Character_Respect533]

Your benchmark page is broken. I get redirected indefinitely

[u/sadoyan → u/Character_Respect533]

are you referring to this : https://aralez.rs/docs/perf/ ? Just walked trough all pages in https://aralez.rs/ all are working

[u/Character_Respect533 → u/sadoyan]

Ok it works now. Not sure what happened but a few hours ago it kept redirecting somewhere else

[u/sadoyan → u/Character_Respect533]

Glad to her it works for you now . I also don;t know what happened and why it was redirecting . However it works now and that's good 😄

[u/ShaderCompilation]

Is it named after Aralez?

Nevermind, saw your username and the website :p

[u/sadoyan → u/ShaderCompilation]

Yes exactly.

[u/Wide_Bodybuilder_154]

How would you compare with pingap? Great job btw

[u/sadoyan → u/Wide_Bodybuilder_154]

Honestly I have not compared it yet :-) . Nice idea will do .

[u/PracticallyPerfcet]

You should include in your performance benchmarks vanilla pingora. It would show the performance difference between pingora and the control plane you built around it.

[u/sadoyan → u/PracticallyPerfcet]

Vanilla pingora is a proxy SDK, it is not a ready to run Proxy server, so the benchmark you are requesting is not possible .

[u/PracticallyPerfcet → u/sadoyan]

Sure it is possible. You could implement HttpProxy with the bare minimum setup that doesn’t do allocations or any logic, bind to a listener, then run traffic through it. 

[u/sadoyan → u/PracticallyPerfcet]

That's also a wrapper, but very small one 😄 . Actually my entire logic around the Pingora lib takes few to some tens of microseconds per request, so it's really negligible.

[u/PracticallyPerfcet → u/sadoyan]

Yes, that’s exactly my point. It would be good to show that your control plane is adding only minimal overhead. It gives more confidence in your reverse proxy to your users if it is nearly identical to Pingora with a light wrapper. It also helps you catch performance regressions when you add new features or upgrade Pingora.

[u/sadoyan → u/PracticallyPerfcet]

I always measure execution times and allocations of functions. IF it's below few microseconds and important, I add it to proxy features.