4 ms·

I am quite happy using LXD. Is there any built-in way to expose a tcp port ? I am using iptables in the host to do this. thanks

• artellectual 8y ago
  LXD has proxy devices, which allows you to map your host's port to your containers ports. https://github.com/lxc/lxd/blob/master/doc/containers.md#type-proxy https://github.com/lxc/lxd/blob/master/doc/containers.md#typ... Makes life very easy, I used to have to mess with iptables too but with proxy device things became much simpler.
  • fasteo 8y ago
    ahh, much better. Thanks for the pointer!
  • indigodaddy 8y ago
    This would force you to https on the lxc/LXD endpoint that you proxied to correct? I prefer to just iptables 80/443 (guess could proxy that part too instead of iptables) to an LXD HAProxy container, and then have HAProxy do the proxying and domain-based load-balancing/acl's, coupled with the advantage of terminated SSL in one place (the HAproxy container) for all (sub)domains/services.