docker-registry-proxy

README

Docker Registry Proxy

Pass-through docker registry (distribution) proxy with the following features:

• docker-compatible errors
• metadata caching (up to 100% cache hit ratio on supported endpoints and http methods)
• prometheus metrics with basic auth and ip filtering
• sentry integration
• healthchecks.io integration
• ip filtering (GET, HEAD, OPTIONS) and trust (PATCH, POST, PUT, DELETE)
• user agent filtering
• configurable backend (including private networks)
• configurable dynamic auth provider

Config

env:

• DRP_PORT - http port, default 8080
• DRP_LOGLEVEL - log level, default info
• DRP_SENTRY - sentry dsn
• DRP_HC_URL - healthchecks.io url, default: https://hc-ping.com
• DRP_HC_UUID - healthchecks.io check uuid
• DRP_METRICS_LOGIN - metrics login
• DRP_METRICS_PASSWORD - metrics password
• DRP_METRICS_IPS - metrics ips, space separated
• DRP_CACHE_TTL - cache ttl in minutes, default: 60
• DRP_CACHE_SIZE - cache size, default: 1000
• DRP_TARGET_SCHEME - target scheme
• DRP_TARGET_HOST - target host
• DRP_ALLOWED_IPS - static list of allowed ips, space separated (GET, HEAD, OPTIONS requests)
• DRP_ALLOWED_UAS - static list of allowed user agents, space separated (GET, HEAD, OPTIONS requests)
• DRP_ALLOWED_PROVIDER_URL - (optional) url of the dynamic auth provider with %s placeholder for IP, e.g., http://auth-provider:8080/check/%s will send GET request to the http://auth-provider:8080/check/1.2.3.4 endpoint and expects 200 status code for allowed
• DRP_ALLOWED_PROVIDER_LOGIN - (optional) basic auth login for the dynamic auth provider
• DRP_ALLOWED_PROVIDER_PASSWORD - (optional) basic auth password for the dynamic auth provider
• DRP_TRUSTED_IPS - static list of trusted ips, space separated (PATCH, POST, PUT, DELETE requests)