backend services patching
This commit is contained in:
+11
-1
@@ -170,7 +170,17 @@ aws elbv2 delete-target-group \
|
||||
| Environment variable | Default | Description |
|
||||
|---|---|---|
|
||||
| `FLOCI_SERVICES_ELBV2_ENABLED` | `true` | Enable or disable the ELBv2 service |
|
||||
| `FLOCI_SERVICES_ELBV2_LISTENER_FORWARDER_IMAGE` | `alpine/socat:1.8.1.3` | Pinned sidecar image that publishes ALB listener ports from a Docker-hosted Floci container. |
|
||||
|
||||
## Listener Ports
|
||||
|
||||
Listener sockets bind on the Floci host. Expose any listener ports you need in Docker Compose when Floci itself runs in a container, similar to RDS and ElastiCache proxy ports.
|
||||
ALB DNS names default to `name-id.elb.localhost`, which resolves to the host loopback address.
|
||||
When Floci runs in Docker, it creates a lifecycle-managed `socat` sidecar per active listener
|
||||
port. The sidecar publishes that same port on the host and forwards it to Floci, so no static
|
||||
Docker Compose port range is required. A host-port conflict prevents that listener from being
|
||||
reachable until the conflict is removed.
|
||||
|
||||
Instance targets use their container bridge IP as the primary route. When Floci cannot route to
|
||||
that bridge IP, such as Docker Desktop or DinD isolation, it falls back to the instance's existing
|
||||
published application port through `host.docker.internal`. This fallback is conditional; direct
|
||||
bridge routing remains the normal path whenever it is reachable.
|
||||
|
||||
Reference in New Issue
Block a user