kedge

kedge copied to clipboard

The /rs/cors package has this reported CVE [CVE-2018-20744](https://nvd.nist.gov/vuln/detail/CVE-2018-20744) when the CORS policy is set to `*`. Since the CORS policy is configurable with a flag it is possible a user...

kmilner

kedge: Add support for advanced TLS configuration for backends

1

Right now, there is no possibility to configure correct TLS. The only possibility is to use `insecure` option.

bwplotka

Questions: would it be able to access RTSP connections in another cluster?

1

Hey, this looks AMAZING! Thank you for this. I was wondering if it would be possible to access RTSP connections (next to HTTP) in another cluster? Cédric

cedricve

We use https://github.com/improbable-eng/go-srvlb resolver to watch on resolver changes. The interval of lookup is based on TTL, but std golang `net` libraries does not support those. So either: * use...

bwplotka

Istio gateways?

2

Reading the blog article/readme, the architecture bears some similarities to the newly introduced Gateways in Istio, that allows bridging multiple kubernetes clusters or any infrastructure for that matter, while still...

rshriram

Basically this will allow debug, per container access. How it should work? IPAdhoc: - For some specified matcher in form of `.matcher` dial to `ip` and allow only some ports....

bwplotka

When trying to access the `/debug/pprof/profile` endpoint for a golang webserver with kedge/winch, I get an `ERR_EMPTY_RESPONSE`.

jutkko

winch: Cache kedge DNS resolution to optimize winch

3

We resolve all configured kEdges on demand. Even when it is used constantly, we perform DNS resolution every each time. Let's optimize this. (DNS can be flaky)

bwplotka

kedge: Add graceful shutdown in case of SIGTERM

1

bwplotka

bwplotka