3 ms·

LXD has proxy devices, which allows you to map your host's port to your containers ports. https://github.com/lxc/lxd/blob/master/doc/containers.md#type-proxy h

LXD has proxy devices, which allows you to map your host's port to your containers ports. https://github.com/lxc/lxd/blob/master/doc/containers.md#type-proxy https://github.com/lxc/lxd/blob/master/doc/containers.md#typ... Makes life very easy, I used to have to mess with iptables too but with proxy device things became much simpler.

fasteo 8y ago
ahh, much better. Thanks for the pointer!
indigodaddy 8y ago
This would force you to https on the lxc/LXD endpoint that you proxied to correct? I prefer to just iptables 80/443 (guess could proxy that part too instead of iptables) to an LXD HAProxy container, and then have HAProxy do the proxying and domain-based load-balancing/acl's, coupled with the advantage of terminated SSL in one place (the HAproxy container) for all (sub)domains/services.