many-proxies-rs

This is a playground to explore many types of proxies, for example:

TCP proxy: simply pass the packets through so can’t do many. Typically use for load balancing, throttling, etc.
TLS (transportation level security, not two level system) non pass-through proxy: Leave the TLS handshake to the server but can peek on unencrypted portion of TLS handshake. Typically used for routing using server name indicator (SNI) and application level protocol negotiation (ALPN). Can also authenticate client certificate.
TLS terminating proxy: Does TLS handshake and thus need server certificate and decrypt TLS traffic. Have the opportunity to work with application protocol, such as Application Load Balancer (ALB).
gRPC proxy: deserialized and re-serialize gRPC traffic. Can validate/modify the payload.

In order to test the proxies, we borrowed some gRPC examples from the tonic project

To run the sample client and server, from separate terminals run:

cargo run --bin tls-server

cargo run --bin tls-client [port]

Port is optional above.

TCP Proxy

A proxy that simply forwards TCP packets. To test, run tls-server. Then run the proxy:

cargo run --bin tcp-proxy

Test with client:

cargo run --bin tls-client -- 50052

A proxy that decrypt TLS traffic and communicates with backend in clear.

Run server in clear:

cargo run --bin tls-server -- no-tls

Run TLS terminator:

cargo run --bin tls-term

Test with client:

cargo run --bin tls-client -- 50052

Compare this to the Java/Netty version!