How do you typically serve Phoenix applications? It’s common for many envs to have a reverse proxy (pure http server) set as the “first line of defence”, typically also serving static files. Do you use this kind of setup also for Phx applications? If not then why is it not needed?

I run my apps on fly.io so I guess they technically have a proxy infront of it as a loadbalancer (but I’m not in control of it and I don’t think it does any defence etc just load balancing). For protection I use Cloudflare.

The “defence” part was in quotes. I don’t mean it in literal sense of protection against threats. Generally I typically ran e. g. Rails or Laravel applications behind a rev-proxy. I know many others who do the same. For example an Nginx server can cope with much higher traffic and deliver much highe…

In my Traefik setup I put the https and cert management completely on the shoulders of Traefik. The phoenix app just continues to listen on 4000 via the docker port mapping. The only unusual change on the Phoenix side was that in runtime.exs I do: config :markably, MarkablyWeb.Endpoint, ... …

I used to reverse proxy with Nginx, but lately I just serve directly from Phoenix with site_encrypt

I used Caddy for local development. Will deploy it someday. It’s super easy. It automatically fetches and renews Letsencrypt certs for your main domain and subdomains. Also, it’s 4x faster than Nginx and super simple to use. www.derpycoder.site { redir https://derpycoder.site permanent } derpy…

[image] derpycoder: Also, it’s 4x faster than Nginx Uh.. that’s a bold claim. In what use cases? Any data to back that up? Not that I want to discredit Caddy or something but I take such claims with a huge grain of salt. Especially as it says on its website that it’s written in golang :wink: …

[image] silverdr: Uh… that’s a bold claim. In what use cases? Any data to back that up? Former founder of Dgraph, a hardcore techie, created a blog post: HTTPS Reverse Proxy: Caddy outperforms NGINX 4x - Manish R Jain In my setup, where I have an HTTPS load balancer, sending traf…

In the blog post that you cited, he was using nginx in single thread and caddy in multi-thread. Also it is a synthetic benchmark that has very little processing on the proxyed application server. Single thread Nginx is a valid config for real world workloads because you want to leave as much as poss…

I personally used Haproxy and Caddy. I found caddy to be easy to use, has easy HTTPS, HTTP/3 is enabled by default, and can reload from the config easily. It has sensible defaults, however, I felt Haproxy was a tad bit faster when using both of them locally. But the config for Haproxy took me a wh…

I use nginx - I have a gist for my config here default.nginx · GitHub Works well enough for me. I do have very low traffic so I can’t speak to scaling :slight_smile:

Serving Phoenix application - rev proxy?

Questions & Help Questions

derpycoder January 28, 2023, 2:48pm 8

Former founder of Dgraph, a hardcore techie, created a blog post:

Here’s another, which doesn’t claim Caddy is 4x faster than Nginx:

Haha.