https://praxis.fast/praxis/dev/examples/configs/protocols/Recent content in Protocols on PraxisHugoenhttps://praxis.fast/praxis/dev/examples/configs/protocols/grpc-http2-upstream.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/grpc-http2-upstream.yaml/Praxis proxies to upstreams over HTTP/1.1 by default. gRPC backends speak HTTP/2 only, and a call’s outcome (grpc-status) arrives in response trailers, which no HTTP/1.1 leg can carryhttps://praxis.fast/praxis/dev/examples/configs/protocols/mixed-protocol.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/mixed-protocol.yaml/HTTP and TCP listeners run on a single server instancehttps://praxis.fast/praxis/dev/examples/configs/protocols/tcp-consistent-hash.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-consistent-hash.yaml/TCP consistent-hash load balancing (client IP affinity)https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-least-connections.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-least-connections.yaml/TCP least-connections load balancinghttps://praxis.fast/praxis/dev/examples/configs/protocols/tcp-proxy.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-proxy.yaml/Bidirectional TCP forwardinghttps://praxis.fast/praxis/dev/examples/configs/protocols/tcp-round-robin.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-round-robin.yaml/TCP round-robin load balancing across database replicashttps://praxis.fast/praxis/dev/examples/configs/protocols/tcp-timeouts.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-timeouts.yaml/TCP proxy with session and max duration timeouts. tcp_session_timeout_ms wraps the entire TCP forwarding session in a hard deadline, terminating connections after the threshold regardless of activity. tcp_max_duration_secs caps the total session duration in secondshttps://praxis.fast/praxis/dev/examples/configs/protocols/tcp-tls-mtls.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-tls-mtls.yaml/The proxy requires TCP clients to present a valid TLS certificate signed by the trusted CAhttps://praxis.fast/praxis/dev/examples/configs/protocols/tcp-tls-termination.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tcp-tls-termination.yaml/TLS on the listener; plain TCP to the upstream backendhttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-cipher-suites.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-cipher-suites.yaml/Restrict accepted cipher suites per listenerhttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-http-reencrypt.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-http-reencrypt.yaml/HTTPS on the listener; TLS to the upstream backendhttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-both.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-both.yaml/Client mTLS to the proxy (client cert required), and proxy mTLS to the upstream backend (proxy presents its own client certificate)https://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-listener.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-listener.yaml/The proxy requires clients to present a valid TLS certificate signed by the trusted CAhttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-listener-request.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-listener-request.yaml/The proxy requests a client certificate but does not require onehttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-spiffe.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-spiffe.yaml/The proxy authorizes a client at the TLS handshake by the SPIFFE ID in its X.509-SVID client certificatehttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-upstream.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-mtls-upstream.yaml/Plain HTTP from clients; the proxy presents a client certificate to the upstream backend, which requires mutual TLS authenticationhttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-multi-cert.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-multi-cert.yaml/Multiple certificates on one listener; Praxis selects the certificate matching the client’s SNI hostnamehttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-sni-routing.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-sni-routing.yaml/Routes TLS connections to different upstreams based on the Server Name Indication (SNI) hostname in the ClientHellohttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-termination.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-termination.yaml/Accept HTTPS connections and forward decrypted requests to an HTTP backend.https://praxis.fast/praxis/dev/examples/configs/protocols/tls-verify-disabled.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-verify-disabled.yaml/Plain HTTP listener; TLS to the upstream with certificate verification disabledhttps://praxis.fast/praxis/dev/examples/configs/protocols/tls-version-constraint.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/tls-version-constraint.yaml/Restrict accepted TLS versions via min_versionhttps://praxis.fast/praxis/dev/examples/configs/protocols/upstream-ca-file.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/upstream-ca-file.yaml/Sets a trusted CA bundle for all upstream TLS connections via runtime.upstream_ca_filehttps://praxis.fast/praxis/dev/examples/configs/protocols/upstream-tls.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/upstream-tls.yaml/Plain HTTP on the listener; TLS to the upstreamhttps://praxis.fast/praxis/dev/examples/configs/protocols/websocket.yaml/Mon, 01 Jan 0001 00:00:00 +0000https://praxis.fast/praxis/dev/examples/configs/protocols/websocket.yaml/HTTP listener that transparently proxies WebSocket upgrade requests