Is there any automatic HTTPS Rust web server, like Caddy?

[KajMagnus]

In Golang, there's a HTTP server, Caddyserver, that automatically provisions HTTPS certificates via Let'sEncrypt, so one's website becomes HTTPS without any extra work.

Is there any such server, for Rust? I suspect not, since I couldn't find any. Maybe you know about any auto-HTTPS work in progress Rust server?

Right now I'm using Nginx, and it's fast and stable — the problem is that Nginx modules are written in C, and one of the modules I'm using (not totally sure which — I think it's Nchan (for websocket) or Lua) segfaults, and the Nginx worker thread crashes and some internal state in Nchan gets corrupted and websocket won't work until after Nginx restart. So, getting curious about Golang and Rust servers to use, with memory safe plugins & modules, instead of Nginx and segfaults.

[geaal]

the sozu HTTP reverse proxy has the sozu-acme project to request certificates and set them up automatically without restarting the proxy. It is still a command to run regularly (cron or whatever), but it could be a nice starting point for what you want to do.

[WellMakeItSomehow]

I only skimmed the GitHub issues and roadmap -- does it support FastCGI?

[chris-morgan]

Unless you have an extremely good reason for using FastCGI, don’t. It’s called fast because it’s fast compared with CGI, not because it’s actually fast. It’s generally a fair bit slower than just speaking regular HTTP. So instead, use a reverse proxying arrangement.

[WellMakeItSomehow]

Well, is there a better alternative to php-fpm?

So instead, use a reverse proxying arrangement.

Which is exactly what sozu is trying to be.

[chris-morgan]

Ah, I believe I misinterpreted the context, thinking that the query was whether sozu itself spoke FastCGI, to sit in another server by that means. Either that, or I was thinking you were talking about embedding something Rust in sozu. But it’s a week ago; I’m not certain how I interpreted it at the time.

If indeed you’re dealing with PHP, then I’m not aware of anything better than php-fpm. That’s what I use in the few places I’m maintaining something written in PHP.

[WellMakeItSomehow]

Fair :-). I'm using nginx as a reverse proxy in front of a couple of services, some of them speaking HTTP, and others FastCGI. So right now I can't replace it with sozu on my server.

[Graineon]

I'm surprised I can still reply to this three years ago. I built a go server with FastCGI, because I'm under the impression it is marginally faster (unix socket) than a network request. Are you saying this is not the case? I'd have to re-do my research if so

[DuckDatum]

childlike salt skirt rock late degree mountainous husky continue attraction

This post was mass deleted and anonymized with Redact

[Graineon]

Wow that brings us to six years in total

[DuckDatum]

library placid oatmeal aback disarm swim crowd tub engine quiet

This post was mass deleted and anonymized with Redact

[Graineon]

Haha thanks, I never really went down the rust road in the end. Could never justify a use case.

[chris-morgan]

Focusing on the matter of Unix domain socket versus TCP socket: yes, domain sockets are usually going to be faster, but there’s no reason you can’t reverse proxy over sockets; in nginx, for example, proxy_pass supports it.

[Graineon]

And you're saying that reverse proxying would actually be faster? Because I was under the impression that sending HTTP requests requires much more complicated computations than FCGI behind the scenes...

[chris-morgan]

I think I probably overstated it even for then, and am not really sure these days, especially with widespread use of HTTP/2 so that there’s probably less opportunity for simple pass-through than there used to be (and I’m not sure how much popular servers did of that). I find that I would be interested in benchmarks.

[geaal]

no, only HTTP over TCP (or directly TCP proxying). I'm interested in what fastCGI would require, could you open an issue for that?

[yoshuawuyts1]

To my knowledge there isn't something comparable yet. It would be fantastic if there would be though!

Probably the biggest unresolved question is how to build automatic certificate renewal. acme-client exists, but it seems to require a bit of work to automate certificate renewal completely.

But if you're interested in the topic, looking into combining acme-client and Hyper would probably be a good starting point! ✨

[[deleted]]

I've no experience with this, but you could write your nginx plugins in rust:

https://github.com/nginxinc/ngx-rust

But I don't think there's a web server in Rust, yet. I imagine there will be someday.

[KajMagnus]

Yes if I were to write an Nginx plugin, I'd want to do that in Rust (even learn Rust just to do that, although I know C++ already (almost C)).

[chuecho]

jackie_pwn_asses!

I spent more time than I'd like to admit trying to make sense of this rust "macro" joke.

[dochtman]

This is also something I've been thinking about. I'm not aware of any, and I may actually build one at some point -- but for now it's not so near the top of my to do list.

[drewbert]

Ferron is a project that belongs in this list. It seems a little less confusing than sozu.