fabiolb/fabio
Fabio
Fabio is a network gateway that provides reverse proxying, layer 7 traffic management, and automated service discovery mapping. It functions as an HTTP reverse proxy, a gRPC and TCP proxy, and a service discovery gateway to route incoming traffic to healthy backend instances.
The project distinguishes itself through deep integration with service registries, specifically acting as a Consul load balancer to automatically synchronize routing tables and update destination targets. It manages diverse traffic types using SNI-based routing for raw TCP streams and maintains full protocol compatibility for gRPC requests.
Broad capabilities include load balancing with weighted traffic distribution, edge SSL termination, and path-based routing using glob patterns and prefix stripping. The system also covers security and observability via IP address filtering, basic authentication, and the export of performance metrics.
Features
- Consul Load Balancers - Functions as a load balancer that automatically discovers backend services and updates routing tables via the Consul registry.
- Traffic Routing - Maps incoming HTTP requests to backend services using path-based or host-specific routing rules.
- Microservice Traffic Management - Manages HTTP headers, WebSocket connections, and SSL certificates for microservices architectures.
- Service Discovery - Automatically synchronizes routing tables with a service registry to update destination targets as instances scale.
- SSL Termination Proxies - Manages security certificates and encrypts client connections at the entry point before forwarding traffic internally.
- Consul Service Discovery - Distributes network traffic across backend services using Consul for automatic service discovery and health tracking.
- Health-Aware Distribution - Distributes network requests to healthy backend instances by syncing with a service discovery registry.
- Dynamic Service Discovery - Maps external requests to healthy service instances discovered through a dynamic registry.
- gRPC Traffic Routing - Routes gRPC calls to backend services while maintaining full protocol compatibility.
- Reverse Proxies - Routes incoming web traffic to backend services based on URL paths, hostnames, and glob patterns.
- Service Discovery Integrations - Syncs routing tables with external service registries to automatically update destination targets.
- TCP Proxies - Forwards raw TCP streams using SNI-based routing to direct non-HTTP traffic to backend services.
- gRPC - Forwards gRPC calls and raw TCP streams using SNI-based routing to backend instances.
- Service Discovery Registries - Maintains a dynamic routing table by continuously polling a service discovery registry for instance health and availability.
- Dynamic Routing - Directs incoming web requests to backend services based on URL paths or hostnames without manual configuration.
- Path-Based Routers - Directs incoming web requests to specific backend services based on URL path prefixes and glob patterns.
- Websocket Connection Managers - Maintains long-lived bidirectional WebSocket connections between clients and backend services.
- Weighted Load Balancing - Distributes network requests across service instances based on numerical weight tags from the discovery system.
- SNI Routing - Routes raw TCP streams to backend targets by inspecting the Server Name Indication field during the TLS handshake.
- Traffic Routing Rules - Defines manual traffic rules in a key-value store to adjust distribution without redeploying.
- SSL/TLS Certificate Management - Manages SSL/TLS certificate loading and renewal for edge encryption and secure client communication.
- Path Prefix Stripping - Removes specified path prefixes from the request URL before forwarding traffic to the backend.
- API Gateways - Zero-conf load balancing router for microservices.
