4 ms·
> Stick a barebones haproxy on it. Run it in tcp mode pointing at a wireguard client ip for the backend. If you have just one backend server instance, you coul
by pflanze 4y ago
> Stick a barebones haproxy on it. Run it in tcp mode pointing at a wireguard client ip for the backend.
If you have just one backend server instance, you could also use a DNAT iptables rule instead, which would have the advantage of not hiding the originating IP from the backend. Or am I missing something?
- ectospheno 4y agoI'm assuming actual priority is keeping your home internet connection usable to your family. Easier to fail gracefully under configurable loads in the haproxy config. I'd rather enormous amounts of traffic never reach the house than try to handle it there.
- pflanze 4y agoThat's a good point, thanks!