cloudflare/serverless-registry
Serverless Registry
Serverless Registry is a container registry service implemented as a serverless application. It provides a platform for hosting and managing container images by leveraging distributed object storage and edge computing to handle image layers and metadata.
The project distinguishes itself by utilizing edge-side request proxying and lazy pull-through caching to manage external image dependencies. By fetching and persisting remote images on demand, it improves availability and access speeds for container runtimes. The system also employs chunked stream processing to manage large image layers, ensuring reliable data transfer and storage within serverless environments.
The registry includes comprehensive security and access control mechanisms, supporting both basic authentication and token-based validation to protect repositories. It is designed to integrate with standard container runtime commands, allowing users to push and pull images while maintaining consistent access through a globally distributed infrastructure.
Features
- Container Image Registries - Provides a container registry service for hosting, pushing, and pulling images using standard runtime commands.
- Remote Image Pulling - Fetches and persists remote container images on demand to provide a local fallback for external dependencies.
- Container Registries - Provides a storage platform for container images using object storage and serverless functions.
- Container Registry Proxies - Acts as a container registry proxy to cache external images and ensure consistent availability.
- Object-Storage Persistence - Stores large binary container layers as immutable blobs within distributed cloud object storage.
- Layer Chunking - Implements layer chunking to manage large container image layers and ensure reliable data transfer.
- Upstream Registry Caching - Caches external images locally to ensure consistent availability and faster access during migrations.
- Container Image Registry Uploads - Supports reliable container image uploads by chunking large layers over constrained network connections.
- Container Image Caching - Caches remote container images to improve deployment speeds and ensure consistent availability.
- Cloudflare R2 Object Storages - Uses distributed object storage for hosting container image blobs and manifests with global access.
- Cloudflare Workers Implementations - Implements the container registry protocol as a serverless application using edge computing.
- Edge Proxies - Routes registry traffic through edge servers to handle authentication and request logic at the network edge.
- Basic Authentication - Supports standard username and password authentication for secure interaction with image repositories.
- Credential-Based Access Controls - Validates incoming requests against stored credentials or public keys to enforce repository security.
- Registry Access Controls - Secures image repositories by validating user credentials and tokens to prevent unauthorized access.
