caddyserver/caddy

Features

• Automated HTTPS Management - Streamlines the entire process of obtaining, renewing, and applying TLS certificates for encrypted web traffic.
• Atomic Configuration Swappers - Provisions new configurations in the background to enable zero-downtime updates of the active server state.
• HTTP Listener Configurations - Defines listener parameters including connection timeouts, keepalive settings, and protocol support for incoming network traffic.
• HTTP Server Directives - Utilizes a modular command syntax to define complex request handling and traffic processing rules.
• Request Matchers - Applies conditional logic to filter and route requests based on specific paths, headers, or other properties.
• Reverse Proxies - Forwards incoming requests to backend servers while managing encryption and path-based routing logic.
• Reverse Proxy Orchestrators - Orchestrates traffic flow to backend services with built-in load balancing and protocol upgrade capabilities.
• Automatic HTTPS Proxies - Acts as a network gateway that automates TLS certificate management to ensure secure traffic delivery.
• Automated Certificate Management - Handles the full lifecycle of certificates, including automated issuance, renewal, and HTTP-to-HTTPS redirection.
• On-Demand TLS Issuance - Generates TLS certificates on-the-fly during the initial handshake for arbitrary hostnames without requiring manual setup.
• Plugin Architectures - Enables developers to extend core functionality through a robust system of registered plugins and lifecycle hooks.
• Server Module Managers - Coordinates the dynamic loading and lifecycle of server components through an interface supporting atomic configuration reloads.
• Extensible Web Servers - Functions as a modular platform for serving web traffic with native support for dynamic configuration and security.
• Virtual Host Definitions - Maps hostnames and ports to specific site configurations to support multiple independent applications on one server.
• Directive-Based Request Pipelines - Directs incoming traffic through a chain of modular handlers that transform requests based on defined rules.
• TLS Handshake Orchestrators - Intercepts connections to dynamically provision certificates and enforce security policies during the TLS handshake.
• TLS Configuration Management - Automates ACME protocol integration and manages TLS handshake security parameters.
• Extensible Server Architectures - Supports a plugin system that allows custom logic injection directly into the request lifecycle.
• Dynamic Configuration APIs - Exposes an API for modifying routing and server settings at runtime without needing process restarts.
• Dynamic Configuration Engines - Processes and validates server settings in real-time to enable zero-downtime updates and atomic configuration reloads.
• Server Site Blocks - Isolates and manages server settings for specific domains or service endpoints through logical grouping blocks.
• Admin API Control Planes - Offers a dedicated internal HTTP interface for secure, authenticated management of server state, metrics, and runtime operations.
• ACME Validation Strategies - Validates domain ownership using HTTP, TLS-ALPN, or DNS challenges to automatically obtain publicly-trusted certificates.
• Certificate Storage Backends - Maintains persistent storage configurations to synchronize and share TLS certificates across multiple server instances in a cluster.
• JSON-Driven Configuration Schemas - Encodes the entire server state as a hierarchical JSON document that defines all modules, routes, and global settings.
• Module Registration Interfaces - Permits developers to register custom modules that follow a standardized lifecycle of loading, provisioning, and cleanup for seamless integration.
• Guest Module Loaders - Implements a modular loading framework that provisions and initializes external components using structured configuration data.
• Logging and Telemetry - Emits structured, low-overhead diagnostic logs with configurable levels and strongly-typed fields for efficient telemetry.
• Single Page Application Hosting - Rewrites requests for non-existent files to a central index to facilitate seamless client-side routing for single-page applications.
• Static Asset Serving - Optimizes the delivery of static files, directory listings, and compressed content directly to end users.
• Static File Servers - Delivers static assets with built-in directory browsing, template rendering, access logging, and automatic compression.
• Load Balancing and Ingress - Fast, cross-platform HTTP/2 web server with automatic HTTPS.
• Sponsorship and Monetization - Web server project utilizing sponsorships for sustainability.
• More to explore - Web server with automatic HTTPS.
• Global Server Settings - Centralizes server parameters including network binding, storage backends, and administrative API settings for baseline behavior.
• Certificate Authorities - Operates as an automated certificate authority to generate, sign, and manage digital certificates for secure HTTPS communication.
• Interface-Based Module Registries - Utilizes interface-based registration to dynamically load and manage modular extensions within the core system.
• Application Settings Management - Configures global options that apply to the entire server instance via a specialized block at the beginning of the configuration file.
• Expression-Based Matchers - Evaluates custom boolean logic for request matching using the Common Expression Language to combine multiple criteria flexibly.
• Host Header Matchers - Filters requests based on the Host header field to apply specific logic within site blocks handling multiple hostnames.
• Module Lifecycle Management - Executes provisioning, validation, and cleanup methods automatically when modules are loaded or discarded by the system.
• Monitoring and Observability - Provides a production-ready environment with structured logging, performance profiling, and metrics endpoints for diagnostic analysis.
• Reusable Configuration Blocks - Modular configuration snippets allow developers to share complex route blocks across multiple sites, improving maintainability and reducing redundant logic.
• Dynamic Configuration Placeholders - Runtime placeholders expand into dynamic values based on request context, allowing configuration arguments to adapt automatically during execution.
• Directive Execution Orderers - Strict directive ordering ensures HTTP handlers execute in the correct priority sequence, allowing developers to override default evaluation logic when necessary.
• Filesystem Request Matchers - Matches requests based on the existence, size, or modification time of files on disk with support for custom root directories.
• Query Parameter Matchers - Flexible matching rules filter incoming requests based on specific query string parameters, including support for exact keys, wildcards, and multiple values.
• Local Certificate Authorities - Issuance and management of local root certificates provide trusted encryption for internal hostnames and IP addresses without needing public certificate authorities.
• Reactive & Event-Driven Systems - Internal event buses trigger automated workflows like certificate renewal or configuration reloads in response to state changes or system signals.
• Performance Monitoring Tools - Real-time access to heap, CPU, and goroutine profiles via an admin interface helps diagnose memory leaks and performance bottlenecks.

Star-Verlauf