rpardini/docker-registry-proxy
Docker Registry Proxy
Este proyecto proporciona una solución de gestión de infraestructura centralizada para entornos de contenedores, diseñada para agilizar la autenticación de registros, el almacenamiento en caché de imágenes y el enrutamiento de tráfico de red. Al actuar como un proxy transparente y espejo de registro, intercepta las solicitudes del motor de contenedores para aplicar políticas de seguridad consistentes y reducir el consumo de ancho de banda externo.
El sistema simplifica la gestión de acceso centralizando las credenciales para múltiples registros de contenedores externos, eliminando la necesidad de configuraciones individuales en el lado del cliente. Además, automatiza la configuración de la infraestructura mediante la inyección de variables de entorno y la orquestación de la confianza de autoridades de certificación personalizadas, asegurando que los tiempos de ejecución de contenedores se comuniquen de forma segura con la infraestructura de proxy local.
El proyecto mantiene una capa de almacenamiento local para capas de imágenes de contenedores y manifiestos, lo que acelera las operaciones de extracción (pull) en entornos de desarrollo y producción distribuidos. Se distribuye como un conjunto de scripts y configuraciones destinados al despliegue dentro de la infraestructura de contenedores empresarial.
Features
- Enterprise Infrastructure Management - Provides a centralized infrastructure management solution for secure and efficient container registry access across enterprise clusters.
- Upstream Registry Caching - Caches images from external registries in a local private registry to improve retrieval speed and reduce bandwidth.
- Container Image Caching - Caches remote container image layers locally to reduce bandwidth consumption and accelerate pull operations.
- OCI Artifact Layer Caches - Stores container image layers and manifests locally to minimize bandwidth usage and accelerate pull operations.
- Registry Proxy Mirrors - Acts as a registry mirror that intercepts pull requests and serves content from a local cache.
- Transparent Network Proxies - Transparently intercepts and routes container engine requests through a local proxy to enforce caching and security policies.
- Container Environment Variable Injection - Automatically injects proxy settings into container runtime environments to ensure all traffic is routed through the local cache.
- Container Registry Management - Centralizes credentials for multiple external container registries to simplify access management across the infrastructure.
- Runtime Configuration Injection - Injects environment variables into container runtimes to route image download requests through a designated proxy.
- Container Traffic Proxies - Routes container engine traffic through a single gateway to enforce consistent security policies and access controls.
- Traffic Routing - Directs container runtime traffic through a network proxy to control access and improve image retrieval speed.
- Proxy-Based Credential Injection - Intercepts and injects registry credentials into network traffic via a proxy to eliminate manual client-side configuration.
- Proxy Root Certificate Imports - Adds proxy root certificates to the system trust store to ensure secure communication with external registry caches.
- Certificate Trust Managers - Automates the installation of custom root certificates into system trust stores to enable secure communication with the proxy.
- Registry Certificate Trusts - Imports self-signed certificates into trust stores to establish secure communication with local network proxies.
