rpardini/docker-registry-proxy
Docker Registry Proxy
该项目为容器环境提供了一个中心化的基础设施管理解决方案，旨在简化注册表身份验证、镜像缓存和网络流量路由。通过作为透明代理和注册表镜像，它拦截容器引擎请求以强制执行一致的安全策略并减少外部带宽消耗。
该系统通过集中管理多个外部容器注册表的凭据来简化访问管理，消除了对单个客户端配置的需求。它进一步通过注入环境变量和编排自定义证书颁发机构信任来自动化基础设施设置，确保容器运行时与本地代理基础设施安全通信。
该项目为容器镜像层和清单维护了一个本地存储层，这加速了跨分布式开发和生产环境的拉取操作。它作为一组脚本和配置分发，旨在部署在企业容器基础设施内。
Features
- Enterprise Infrastructure Management - Provides a centralized infrastructure management solution for secure and efficient container registry access across enterprise clusters.
- Upstream Registry Caching - Caches images from external registries in a local private registry to improve retrieval speed and reduce bandwidth.
- Container Image Caching - Caches remote container image layers locally to reduce bandwidth consumption and accelerate pull operations.
- OCI Artifact Layer Caches - Stores container image layers and manifests locally to minimize bandwidth usage and accelerate pull operations.
- Registry Proxy Mirrors - Acts as a registry mirror that intercepts pull requests and serves content from a local cache.
- Transparent Network Proxies - Transparently intercepts and routes container engine requests through a local proxy to enforce caching and security policies.
- Container Environment Variable Injection - Automatically injects proxy settings into container runtime environments to ensure all traffic is routed through the local cache.
- Container Registry Management - Centralizes credentials for multiple external container registries to simplify access management across the infrastructure.
- Runtime Configuration Injection - Injects environment variables into container runtimes to route image download requests through a designated proxy.
- Container Traffic Proxies - Routes container engine traffic through a single gateway to enforce consistent security policies and access controls.
- Traffic Routing - Directs container runtime traffic through a network proxy to control access and improve image retrieval speed.
- Proxy-Based Credential Injection - Intercepts and injects registry credentials into network traffic via a proxy to eliminate manual client-side configuration.
- Proxy Root Certificate Imports - Adds proxy root certificates to the system trust store to ensure secure communication with external registry caches.
- Certificate Trust Managers - Automates the installation of custom root certificates into system trust stores to enable secure communication with the proxy.
- Registry Certificate Trusts - Imports self-signed certificates into trust stores to establish secure communication with local network proxies.
