3 ms·

For those of us not currently at an OpenBSD console, the man pages can be browsed on-line here: https://man.openbsd.org/man8/relayd.8 https://man.openbsd.org/m

by mbakke 3y ago

For those of us not currently at an OpenBSD console, the man pages can be browsed on-line here: https://man.openbsd.org/man8/relayd.8 https://man.openbsd.org/man8/relayd.8 https://man.openbsd.org/man8/relayctl.8 https://man.openbsd.org/man8/relayctl.8 https://man.openbsd.org/man5/relayd.conf.5 https://man.openbsd.org/man5/relayd.conf.5 Side note, I haven't heard failover used in the context of kicking unhealthy backends before. Failover is typically something that would be implemented with carp(4) (aka VRRP, but with support for active/active setups) on two different machines running relayd. https://man.openbsd.org/man4/carp.4 https://man.openbsd.org/man4/carp.4 Nothing beats the sheer elegance of OpenBSD for networking tasks. :-)

implements 3y ago
> Side note, I haven't heard failover used in the context of kicking unhealthy backends before … In OpenBSD “Failover” also appears in “Trunking a Wireless Adapter”: https://www.openbsd.org/faq/faq6.html#Wireless https://www.openbsd.org/faq/faq6.html#Wireless “The trunk is set up in failover mode, so either interface can be used. If both are available, it will prefer the bge0 port, since that is the first one added to the trunk device.“
ninjin 3y ago
In addition to the excellent man pages, I enjoyed Michael W Lucas' "Httpd and Relayd Mastery" [1]. [1]: https://www.tiltedwindmillpress.com/product/httpd-and-relayd-mastery https://www.tiltedwindmillpress.com/product/httpd-and-relayd...
- b3lm0nt 3y ago
  Seconded. Nice, concise volume that helped me setup hosting for multiple sites on a single VM with different requirements (some reverse proxy, some CGI, some static). Really looking forward to the 3rd edition of Absolute OpenBSD.
emmelaich 3y ago
Is it for relaying any tcp/udp or just http? At first I thought it was the former but it understands http headers. Does it support any other protocols?
- somat 3y ago
  My understanding is that it started life as a fork(note: by same author) of openbsd's httpd. The author wanted to add reverse proxy capability to httpd and decided that the problem domain was complex enough that it would hurt httpd's simplicity and warranted it's own program. So it's heart is a reverse http proxy. generalized to be a generic application layer proxy. and then integrated with the pf firewall to be a ip layer forwarder. note the distinction in the manual between redirections(ip forwarder) and relays(application proxy) According to the manual it has application specific relays for http and dns. for other than that you have to use the generic tcp relay. if you are redirecting, it does not look at the internals of the packet at all.
  - brynet 3y ago
    No, you got that backwards. https://man.openbsd.org/httpd#HISTORY https://man.openbsd.org/httpd#HISTORY > The httpd program first appeared in OpenBSD 5.6. httpd is based on relayd(8).

by mbakke 3y ago

implements 3y ago

> Side note, I haven't heard failover used in the context of kicking unhealthy backends before … In OpenBSD “Failover” also appears in “Trunking a Wireless Adapter”: https://www.openbsd.org/faq/faq6.html#Wireless https://www.openbsd.org/faq/faq6.html#Wireless “The trunk is set up in failover mode, so either interface can be used. If both are available, it will prefer the bge0 port, since that is the first one added to the trunk device.“

ninjin 3y ago

In addition to the excellent man pages, I enjoyed Michael W Lucas' "Httpd and Relayd Mastery" [1]. [1]: https://www.tiltedwindmillpress.com/product/httpd-and-relayd-mastery https://www.tiltedwindmillpress.com/product/httpd-and-relayd...

b3lm0nt 3y ago
Seconded. Nice, concise volume that helped me setup hosting for multiple sites on a single VM with different requirements (some reverse proxy, some CGI, some static). Really looking forward to the 3rd edition of Absolute OpenBSD.

emmelaich 3y ago

Is it for relaying any tcp/udp or just http? At first I thought it was the former but it understands http headers. Does it support any other protocols?

somat 3y ago
My understanding is that it started life as a fork(note: by same author) of openbsd's httpd. The author wanted to add reverse proxy capability to httpd and decided that the problem domain was complex enough that it would hurt httpd's simplicity and warranted it's own program. So it's heart is a reverse http proxy. generalized to be a generic application layer proxy. and then integrated with the pf firewall to be a ip layer forwarder. note the distinction in the manual between redirections(ip forwarder) and relays(application proxy) According to the manual it has application specific relays for http and dns. for other than that you have to use the generic tcp relay. if you are redirecting, it does not look at the internals of the packet at all.
- brynet 3y ago
  No, you got that backwards. https://man.openbsd.org/httpd#HISTORY https://man.openbsd.org/httpd#HISTORY > The httpd program first appeared in OpenBSD 5.6. httpd is based on relayd(8).