mtlsproxy can be run as a container sidecar to add mtls authentication to any http service
50K+
mtlsproxy is a simple proxy service that can be run as a sidecar to provide mutual TLS authentication to any http service.
You can get the usage by running mtlsproxy -h. All flags can be set through environment variables.
Usage of mtlsproxy:
--backend string destination host (default "http://127.0.0.1")
--cert string Path to the server certificate [required]
--cert-key string Path to the server certificate key [required]
--cert-key-pass string Password for the server certificate key
--clients-ca string Path the CAs used to verify client certificates [required]
--listen string Listening address (default ":443")
--log-format string Log format (default "json")
--log-level string Log level (default "info")
-v, --version Display the version
export MTLSPROXY_CLIENTS_CA="/path/to/ca-clients-cert.pem"
export MTLSPROXY_BACKEND="http://127.0.0.1:16686"
export MTLSPROXY_CERT="/path/to/server-cert.pem"
export MTLSPROXY_CERT_KEY="/path/to/server-key"
export MTLSPROXY_CERT_KEY_PASS="secret"
./mtlsproxy
Content type
Image
Digest
sha256:453ac1fa4…
Size
5 MB
Last updated
almost 3 years ago
docker pull aporeto/mtlsproxy:release-6.71.1