A lightweight, fast, always-up HTTP reverse proxy built in Rust, configurable at runtime without reloading.
Sōzu is a lightweight, fast reverse proxy server built with Rust, designed for high performance and safety. It enables dynamic configuration changes and zero-downtime upgrades while processing requests, making it suitable for modern infrastructure needs.
DevOps engineers and infrastructure developers managing high-availability web services who need a secure, performant reverse proxy with minimal downtime.
Developers choose Sōzu for its unique combination of hot configuration via Unix sockets, always-up upgrades without restarting, and memory safety through Rust, along with optimized dependencies like Kawa and Rustls for zero-copy operations.
Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Allows runtime configuration changes via secure Unix sockets without reloading, enabling dynamic adjustments like backend updates or TLS settings on the fly.
Upgrades itself while processing requests, ensuring continuous availability without service interruptions, which is critical for high-availability infrastructure.
Acts as a TLS endpoint using Rustls for efficient encryption, offloading SSL processing from backend servers to improve performance.
Built with Rust for memory safety and uses sandboxed workers to limit exploit impact, protecting backends from direct network access.
The GNU Affero GPL requires sharing modifications if used in a service, which can be prohibitive for commercial products wanting to keep changes proprietary.
Configuration via Unix sockets is less intuitive than file-based approaches and requires additional tooling or custom scripts for integration.
Compared to established proxies like NGINX, Sōzu has fewer third-party integrations, modules, and community resources, which might slow adoption.