<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>reverse proxy Archives | Clever Cloud</title>
	<atom:link href="https://www.clever.cloud/blog/tag/reverse-proxy/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.clever.cloud/blog/tag/reverse-proxy/</link>
	<description>From Code to Product</description>
	<lastBuildDate>Mon, 09 Oct 2023 15:11:28 +0000</lastBuildDate>
	<language>en-GB</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://cdn.clever-cloud.com/uploads/2023/03/cropped-cropped-favicon-32x32.png</url>
	<title>reverse proxy Archives | Clever Cloud</title>
	<link>https://www.clever.cloud/blog/tag/reverse-proxy/</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>Open sourcing Sōzu connectors</title>
		<link>https://www.clever.cloud/blog/engineering/2023/09/25/reverse-proxy-open-sourcing-sozu-connectors/</link>
		
		<dc:creator><![CDATA[Emmanuel Bosquet]]></dc:creator>
		<pubDate>Mon, 25 Sep 2023 15:19:04 +0000</pubDate>
				<category><![CDATA[Engineering]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[reverse proxy]]></category>
		<guid isPermaLink="false">https://www.clever-cloud.com/?p=10297</guid>

					<description><![CDATA[<p><img width="573" height="266" src="https://cdn.clever-cloud.com/uploads/2023/09/clever-cloud-devoile-ses-connecteurs-sozu-open-source-3.svg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="clever cloud devoile ses connecteurs sozu open source 3" decoding="async" fetchpriority="high" /></p><!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8027,"mediaLink":"https://www.clever.cloud/?attachment_id=8027","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p>Clever Cloud is today the main developer of <a href="https://www.sozu.io/">Sōzu</a>, a Reverse Proxy that was developped at Clever Cloud, in <a href="https://www.clever.cloud/blog/engineering/2016/11/02/falling-for-rust/">Rust</a>, to meet the needs of our infrastructure for performance and hot reloading. Sōzu is used throughout Clever Cloud, paired with HAProxy, to route traffic to our customer's applications.</p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/canvas-1-358x447.png" alt="" class="wp-image-8027 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:heading {"level":4} -->
<h4 class="wp-block-heading"><strong>What we used to do: </strong></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>Up until now, our Reverse Proxy Sōzu used to be managed by Clever Cloud by a closed source program that ran on the same machine and assumed two big responsibilities:</p>
<!-- /wp:paragraph -->

<!-- wp:list -->
<ul><!-- wp:list-item -->
<li>Firstly, listen to a RabbitMQ topic and redirect requests to Sōzu (via its UNIX socket)</li>
<!-- /wp:list-item -->

<!-- wp:list-item -->
<li>Secondly, watch over a PKI directory (Public Key Infrastructure) to redirect TLS certificates to Sōzu (via its UNIX socket)</li>
<!-- /wp:list-item --></ul>
<!-- /wp:list -->

<!-- wp:heading {"level":4} -->
<h4 class="wp-block-heading"><strong>Turning open source</strong></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>While working on a new Prometheus connector for Sōzu, we realized we could open source it. With this realization came the idea of porting the logic of the former Sōzu manager (described above) from its closed source state into new open source repositories.<br>What we ultimately aim to develop is an entirely <strong>open-source</strong> <strong>ecosystem around our Reverse Proxy Sōzu</strong>.<br>This blog post details what these new open source components are, and summarizes what they do.</p>
<!-- /wp:paragraph -->

<!-- wp:heading -->
<h2 class="wp-block-heading">Our open-source ecosystem around <strong>Sōzu</strong></h2>
<!-- /wp:heading -->

<!-- wp:heading {"level":3,"fontSize":"large"} -->
<h3 class="wp-block-heading has-large-font-size"><a href="https://github.com/CleverCloud/sozu-prometheus-connector" target="_blank" rel="noreferrer noopener">Sōzu Prometheus connector</a></h3>
<!-- /wp:heading -->

<!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8023,"mediaLink":"https://www.clever.cloud/?attachment_id=8023","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p><a href="https://prometheus.io/docs/introduction/overview/" target="_blank" rel="noreferrer noopener">Prometheus</a> is a monitoring and alerting software suite.<br>This simple connector operates alongside Sōzu. It waits for HTTP requests on the <code>/metrics</code> route, queries Sōzu for its metrics, formats the metrics to be Prometheus-compatible, and sends them in the HTTP&nbsp;response.<br>This means that <strong>Prometheus metrics are readily available on the IP address of a Sōzu machine.</strong></p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/1200px-Prometheus_software_logo.svg_-1024x1015-1-451x447.png" alt="" class="wp-image-8023 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:heading {"level":3,"fontSize":"large"} -->
<h3 class="wp-block-heading has-large-font-size"><a href="https://github.com/CleverCloud/sozu-pulsar-connector" target="_blank" rel="noreferrer noopener">Sōzu Pulsar connector</a></h3>
<!-- /wp:heading -->

<!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8025,"mediaLink":"https://www.clever.cloud/?attachment_id=8025","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p><a href="https://github.com/CleverCloud/sozu-pulsar-connector" target="_blank" rel="noreferrer noopener">Apache Pulsar</a> is a highly scalable messaging platform. We use it extensively at Clever Cloud because of its distributed aspect and cutting-edge throughput performance.<br>The Sōzu Pulsar connector subscribes to a Pulsar topic and transmits messages to Sōzu. Sōzu uses these messages to perform hot reloading on the proxy, which is a key feature of our Reverse Proxy.<br>What it means for us and anyone using the Sōzu ecosystem: this connector enables <strong>updating traffic redirection in real time.</strong></p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/1_7F-rMchWXbujnBT7QUN4zA-1.jpeg" alt="" class="wp-image-8025 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:heading {"level":3,"fontSize":"large"} -->
<h3 class="wp-block-heading has-large-font-size"><a href="https://github.com/CleverCloud/sozu-pki-connector" target="_blank" rel="noreferrer noopener">Sōzu PKI connector</a></h3>
<!-- /wp:heading -->

<!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8026,"mediaLink":"https://www.clever.cloud/?attachment_id=8026","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p>PKI stands for Public Key Infrastructure, an omnipresent security framework on the Internet, typically used for securing connections with HTTPS (among other things). In the PKI framework, Sōzu functions as a <strong>TLS endpoint</strong>: it decrypts HTTPS traffic into HTTP traffic.<br>The Sōzu PKI connector runs alongside Sōzu, watches over a given directory in the file system, reads TLS certificates that were put there by either human or machine, and transmits them to Sōzu.<br>Then , what this ultimately means is: <strong>write a TLS certificate on the machine, Sōzu will have it.</strong> </p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/TLS_icon-e1586274007843.png" alt="" class="wp-image-8026 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:paragraph {"fontSize":"large"} -->
<p class="has-large-font-size"><a href="https://github.com/CleverCloud/sozu-client">Sōzu client</a></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>This is a code library used by all above connectors. It pools connections to Sōzu's UNIX socket and functions entirely asynchronously. All in all, it makes <strong>writing new connectors easier</strong>.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p><strong>What's next</strong><br>The best thing we wish is for the open-source community to join us in using and improving Sōzu as it goes. Our end-game is to build a web UI to manage a Sōzu instance in the navigator.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p><br></p>
<!-- /wp:paragraph -->]]></description>
										<content:encoded><![CDATA[<p><img width="573" height="266" src="https://cdn.clever-cloud.com/uploads/2023/09/clever-cloud-devoile-ses-connecteurs-sozu-open-source-3.svg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="clever cloud devoile ses connecteurs sozu open source 3" decoding="async" /></p><!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8027,"mediaLink":"https://www.clever.cloud/?attachment_id=8027","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p>Clever Cloud is today the main developer of <a href="https://www.sozu.io/">Sōzu</a>, a Reverse Proxy that was developped at Clever Cloud, in <a href="https://www.clever.cloud/blog/engineering/2016/11/02/falling-for-rust/">Rust</a>, to meet the needs of our infrastructure for performance and hot reloading. Sōzu is used throughout Clever Cloud, paired with HAProxy, to route traffic to our customer's applications.</p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/canvas-1-358x447.png" alt="" class="wp-image-8027 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:heading {"level":4} -->
<h4 class="wp-block-heading"><strong>What we used to do: </strong></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>Up until now, our Reverse Proxy Sōzu used to be managed by Clever Cloud by a closed source program that ran on the same machine and assumed two big responsibilities:</p>
<!-- /wp:paragraph -->

<!-- wp:list -->
<ul><!-- wp:list-item -->
<li>Firstly, listen to a RabbitMQ topic and redirect requests to Sōzu (via its UNIX socket)</li>
<!-- /wp:list-item -->

<!-- wp:list-item -->
<li>Secondly, watch over a PKI directory (Public Key Infrastructure) to redirect TLS certificates to Sōzu (via its UNIX socket)</li>
<!-- /wp:list-item --></ul>
<!-- /wp:list -->

<!-- wp:heading {"level":4} -->
<h4 class="wp-block-heading"><strong>Turning open source</strong></h4>
<!-- /wp:heading -->

<!-- wp:paragraph -->
<p>While working on a new Prometheus connector for Sōzu, we realized we could open source it. With this realization came the idea of porting the logic of the former Sōzu manager (described above) from its closed source state into new open source repositories.<br>What we ultimately aim to develop is an entirely <strong>open-source</strong> <strong>ecosystem around our Reverse Proxy Sōzu</strong>.<br>This blog post details what these new open source components are, and summarizes what they do.</p>
<!-- /wp:paragraph -->

<!-- wp:heading -->
<h2 class="wp-block-heading">Our open-source ecosystem around <strong>Sōzu</strong></h2>
<!-- /wp:heading -->

<!-- wp:heading {"level":3,"fontSize":"large"} -->
<h3 class="wp-block-heading has-large-font-size"><a href="https://github.com/CleverCloud/sozu-prometheus-connector" target="_blank" rel="noreferrer noopener">Sōzu Prometheus connector</a></h3>
<!-- /wp:heading -->

<!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8023,"mediaLink":"https://www.clever.cloud/?attachment_id=8023","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p><a href="https://prometheus.io/docs/introduction/overview/" target="_blank" rel="noreferrer noopener">Prometheus</a> is a monitoring and alerting software suite.<br>This simple connector operates alongside Sōzu. It waits for HTTP requests on the <code>/metrics</code> route, queries Sōzu for its metrics, formats the metrics to be Prometheus-compatible, and sends them in the HTTP&nbsp;response.<br>This means that <strong>Prometheus metrics are readily available on the IP address of a Sōzu machine.</strong></p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/1200px-Prometheus_software_logo.svg_-1024x1015-1-451x447.png" alt="" class="wp-image-8023 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:heading {"level":3,"fontSize":"large"} -->
<h3 class="wp-block-heading has-large-font-size"><a href="https://github.com/CleverCloud/sozu-pulsar-connector" target="_blank" rel="noreferrer noopener">Sōzu Pulsar connector</a></h3>
<!-- /wp:heading -->

<!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8025,"mediaLink":"https://www.clever.cloud/?attachment_id=8025","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p><a href="https://github.com/CleverCloud/sozu-pulsar-connector" target="_blank" rel="noreferrer noopener">Apache Pulsar</a> is a highly scalable messaging platform. We use it extensively at Clever Cloud because of its distributed aspect and cutting-edge throughput performance.<br>The Sōzu Pulsar connector subscribes to a Pulsar topic and transmits messages to Sōzu. Sōzu uses these messages to perform hot reloading on the proxy, which is a key feature of our Reverse Proxy.<br>What it means for us and anyone using the Sōzu ecosystem: this connector enables <strong>updating traffic redirection in real time.</strong></p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/1_7F-rMchWXbujnBT7QUN4zA-1.jpeg" alt="" class="wp-image-8025 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:heading {"level":3,"fontSize":"large"} -->
<h3 class="wp-block-heading has-large-font-size"><a href="https://github.com/CleverCloud/sozu-pki-connector" target="_blank" rel="noreferrer noopener">Sōzu PKI connector</a></h3>
<!-- /wp:heading -->

<!-- wp:media-text {"align":"wide","mediaPosition":"right","mediaId":8026,"mediaLink":"https://www.clever.cloud/?attachment_id=8026","mediaType":"image","mediaWidth":15} -->
<div class="wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile" style="grid-template-columns:auto 15%"><div class="wp-block-media-text__content"><!-- wp:paragraph {"placeholder":"Content…"} -->
<p>PKI stands for Public Key Infrastructure, an omnipresent security framework on the Internet, typically used for securing connections with HTTPS (among other things). In the PKI framework, Sōzu functions as a <strong>TLS endpoint</strong>: it decrypts HTTPS traffic into HTTP traffic.<br>The Sōzu PKI connector runs alongside Sōzu, watches over a given directory in the file system, reads TLS certificates that were put there by either human or machine, and transmits them to Sōzu.<br>Then , what this ultimately means is: <strong>write a TLS certificate on the machine, Sōzu will have it.</strong> </p>
<!-- /wp:paragraph --></div><figure class="wp-block-media-text__media"><img src="https://cdn.clever-cloud.com/uploads/2023/07/TLS_icon-e1586274007843.png" alt="" class="wp-image-8026 size-full"/></figure></div>
<!-- /wp:media-text -->

<!-- wp:paragraph {"fontSize":"large"} -->
<p class="has-large-font-size"><a href="https://github.com/CleverCloud/sozu-client">Sōzu client</a></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p>This is a code library used by all above connectors. It pools connections to Sōzu's UNIX socket and functions entirely asynchronously. All in all, it makes <strong>writing new connectors easier</strong>.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p><strong>What's next</strong><br>The best thing we wish is for the open-source community to join us in using and improving Sōzu as it goes. Our end-game is to build a web UI to manage a Sōzu instance in the navigator.</p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p></p>
<!-- /wp:paragraph -->

<!-- wp:paragraph -->
<p><br></p>
<!-- /wp:paragraph -->]]></content:encoded>
					
		
		
			</item>
	</channel>
</rss>
