Using OpenBSD relayd(8) as an Application Layer Gateway - Joel Carnat - EuroBSDcon 2023

Joel Carnat: Using OpenBSD relayd(8) as an application layer gateway
OpenBSD relayd(8) provides various network relaying features. This talk would concentrate on using relayd(8) as a reverse-proxy for Web applications AKA layer 7 forwarding service.
Architecture and configuration examples will address and illustrate use-cases such as: - acting as a TLS end-point. - publishing a simple web server. - providing fail-over and load-balancing. - distribute virtual-host traffic using tags. - filtering access based on HTTP headers and URL pattern. - overwrite / append HTTP headers from / to the back-end server. + remove headers from chatterbox server. + add headers so that back-end server behaves properly. + add headers to improve HTTPS security from the client POV. Configuration examples may be based on proxifying httpd(8), nextcloud, baikal, Synology DSM, GoToSocial and/or Searx.
Joel Carnat:
I'm a French. I work as an Technical Architect contractor. I've been using OpenBSD for several years ; as a user (I'm not dev). I've send bug reports and patches from time to time to the OpenBSD mailing-lists. I have a blog since early 2000-2010s were I write down things I do with FOSS mostly at home. I self-host as much as possible.