rust/neon
1
0
Fork 0
mirror of https://github.com/neondatabase/neon.git synced 2026-08-18 03:58:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,235 Commits 1,487 Branches 282 Tags
b33ca57839fd01bf69a11121ace262fa0f2393a5
Commit Graph

9 Commits

Author SHA1 Message Date
Conrad Ludgate 6c05f89f7d proxy: add local-proxy to compute image (#8823) 
1. Adds local-proxy to compute image and vm spec
2. Updates local-proxy config processing, writing PID to a file eagerly
3. Updates compute-ctl to understand local proxy compute spec and to
send SIGHUP to local-proxy over that pid.

closes https://github.com/neondatabase/cloud/issues/16867
 2024-10-04 14:52:01 +00:00
Folke Behrens 1e90e792d6 proxy: Add timeout to webauth confirmation wait (#9227) 
```shell
$ cargo run -p proxy --bin proxy -- --auth-backend=web --webauth-confirmation-timeout=5s
```

```
$ psql -h localhost -p 4432
NOTICE:  Welcome to Neon!
Authenticate by visiting within 5s:
    http://localhost:3000/psql_session/e946900c8a9bc6e9


psql: error: connection to server at "localhost" (::1), port 4432 failed: Connection refused
	Is the server running on that host and accepting TCP/IP connections?
connection to server at "localhost" (127.0.0.1), port 4432 failed: ERROR:  Disconnected due to inactivity after 5s.
```
 2024-10-02 12:10:56 +02:00
Conrad Ludgate 94a5ca2817 proxy: auth broker (#8855) 
Opens http2 connection to local-proxy and forwards requests over with
all headers and body

closes https://github.com/neondatabase/cloud/issues/16039
 2024-09-30 20:43:45 +01:00
Conrad Ludgate a2e2362ee9 add proxy-protocol header disable option (#9203) 
resolves https://github.com/neondatabase/cloud/issues/18026
 2024-09-30 18:11:50 +00:00
Conrad Ludgate ec07a1ecc9 proxy: make local-proxy config by signal with PID, refine JWKS apis with role caching (#9164) 2024-09-26 19:01:48 +01:00
Folke Behrens c5cd8577ff proxy: make sql-over-http max request/response sizes configurable (#9029) 2024-09-18 13:58:51 +02:00
Stefan Radig fcab61bdcd Prototype implementation for private access poc (#8976) 
## Problem
For the Private Access POC we want users to be able to disable access
from the public proxy. To limit the number of changes this can be done
by configuring an IP allowlist [ "255.255.255.255" ]. For the Private
Access proxy a new commandline flag allows to disable IP allowlist
completely.

See
https://www.notion.so/neondatabase/Neon-Private-Access-POC-Proposal-8f707754e1ab4190ad5709da7832f020?d=887495c15e884aa4973f973a8a0a582a#7ac6ec249b524a74adbeddc4b84b8f5f
for details about the POC.,

## Summary of changes
- Adding the commandline flag is_private_access_proxy=true will disable
IP allowlist
 2024-09-12 15:55:12 +01:00
Folke Behrens 52cb33770b proxy: Rename backend types and variants as prep for refactor (#8845) 
* AuthBackend enum to AuthBackendType
* BackendType enum to Backend
* Link variants to Web
* Adjust messages, comments, etc.
 2024-08-27 14:12:42 +02:00
Conrad Ludgate 06795c6b9a proxy: new local-proxy application (#8736) 
Add binary for local-proxy that uses the local auth backend. Runs only
the http serverless driver support and offers config reload based on a
config file and SIGHUP
 2024-08-23 22:32:10 +01:00