rpardini/docker-registry-proxy
Docker Registry Proxy
Ce projet fournit une solution de gestion d'infrastructure centralisée pour les environnements de conteneurs, conçue pour rationaliser l'authentification au registre, la mise en cache d'images et le routage du trafic réseau. En agissant comme un proxy transparent et un miroir de registre, il intercepte les requêtes du moteur de conteneur pour imposer des politiques de sécurité cohérentes et réduire la consommation de bande passante externe.
Le système simplifie la gestion des accès en centralisant les identifiants pour plusieurs registres de conteneurs externes, éliminant le besoin de configurations individuelles côté client. Il automatise davantage la configuration de l'infrastructure via l'injection de variables d'environnement et l'orchestration de la confiance d'une autorité de certification personnalisée, garantissant que les runtimes de conteneurs communiquent de manière sécurisée avec l'infrastructure proxy locale.
Le projet maintient une couche de stockage locale pour les couches d'images de conteneurs et les manifestes, ce qui accélère les opérations de pull à travers les environnements de développement et de production distribués. Il est distribué sous forme d'un ensemble de scripts et de configurations destinés au déploiement au sein d'une infrastructure de conteneurs d'entreprise.
Features
- Enterprise Infrastructure Management - Provides a centralized infrastructure management solution for secure and efficient container registry access across enterprise clusters.
- Upstream Registry Caching - Caches images from external registries in a local private registry to improve retrieval speed and reduce bandwidth.
- Container Image Caching - Caches remote container image layers locally to reduce bandwidth consumption and accelerate pull operations.
- OCI Artifact Layer Caches - Stores container image layers and manifests locally to minimize bandwidth usage and accelerate pull operations.
- Registry Proxy Mirrors - Acts as a registry mirror that intercepts pull requests and serves content from a local cache.
- Transparent Network Proxies - Transparently intercepts and routes container engine requests through a local proxy to enforce caching and security policies.
- Container Environment Variable Injection - Automatically injects proxy settings into container runtime environments to ensure all traffic is routed through the local cache.
- Container Registry Management - Centralizes credentials for multiple external container registries to simplify access management across the infrastructure.
- Runtime Configuration Injection - Injects environment variables into container runtimes to route image download requests through a designated proxy.
- Container Traffic Proxies - Routes container engine traffic through a single gateway to enforce consistent security policies and access controls.
- Traffic Routing - Directs container runtime traffic through a network proxy to control access and improve image retrieval speed.
- Proxy-Based Credential Injection - Intercepts and injects registry credentials into network traffic via a proxy to eliminate manual client-side configuration.
- Proxy Root Certificate Imports - Adds proxy root certificates to the system trust store to ensure secure communication with external registry caches.
- Certificate Trust Managers - Automates the installation of custom root certificates into system trust stores to enable secure communication with the proxy.
- Registry Certificate Trusts - Imports self-signed certificates into trust stores to establish secure communication with local network proxies.
