[2023] Using OpenBSD relayd(8) as an Application Layer Gateway - Joel Carnat

Joel Carnat: Using OpenBSD relayd(8) as an application layer gateway OpenBSD relayd(8) provides various network relaying features. This talk would concentrate on using relayd(8) as a reverse-proxy for Web applications AKA layer 7 forwarding service. Architecture and configuration examples will address and illustrate use-cases such as: - acting as a TLS end-point. - publishing a simple web server. - providing fail-over and load-balancing. - distribute virtual-host traffic using tags. - filtering access based on HTTP headers and URL pattern. - overwrite / append HTTP headers from / to the back-end server. + remove headers from chatterbox server. + add headers so that back-end server behaves properly. + add headers to improve HTTPS security from the client POV. Configuration examples may be based on proxifying httpd(8), nextcloud, baikal, Synology DSM, GoToSocial and/or Searx. Joel Carnat: I'm a French. I work as an Technical Architect contractor. I've been using OpenBSD for several y