CONFIGURABLE-HTTP-PROXY(1)
π NAME π
okay so bestie, meet configurable-http-proxy β it's a configurable-on-the-fly HTTP Proxy written in Node.js. yes she's that girl. she rewrites her routing while she's running, no restart, no drama. π
this lil page lives in the User Commands section of your manual, so you already know it's giving real-tool energy. β¨
π¦ SYNOPSIS π¦
configurable-http-proxy [options]
that's it. that's the whole vibe. toss her some options and she goes. π«Ά
π OPTIONS π
she has so many options, and honestly? obsessed. every single one below, no skips, no cuts. π
-V,--versionβ prints out the version number. that's the whole job. she ate. π--ip<ip-address> β the public-facing IP of the proxy. who the world sees.--port<n> β the public-facing port of the proxy. defaults to8000if you don't say anything. β--ssl-key<keyfile> β SSL key to use, if any. no key? no worries.--ssl-cert<certfile> β SSL certificate to use, if any.--ssl-ca<ca-file> β SSL certificate authority, if any.--ssl-request-certβ asks for SSL certs so clients can authenticate themselves. π³--ssl-reject-unauthorizedβ rejects unauthorized SSL connections. heads up: this is only meaningful if--ssl-request-certis given. no request, nothing to reject, iykyk.--ssl-protocol<ssl-protocol> β pins a specific SSL protocol, likeTLSv1_2orSSLv3.--ssl-ciphers<ciphers> β a:-separated ssl cipher list. the default excludes RC4, because bestie has taste.--ssl-allow-rc4β allows the RC4 cipher for SSL. it's disabled by default and there's a reason for that. π₯--ssl-dhparam<dhparam-file> β SSL Diffie-Helman Parameters pem file, if any.--api-ip<ip> β the inward-facing IP for API requests. defaults to"localhost".--api-port<n> β the inward-facing port for API requests. defaults to--port=value+1, which is cute of her.--api-ssl-key<keyfile> β SSL key to use, if any, for API requests.--api-ssl-cert<certfile> β SSL certificate to use, if any, for API requests.--api-ssl-ca<ca-file> β SSL certificate authority, if any, for API requests.--api-ssl-request-certβ requests SSL certs to authenticate clients for API requests.--api-ssl-reject-unauthorizedβ rejects unauthorized SSL connections. again: only meaningful if--api-ssl-request-certis given.--client-ssl-key<keyfile> β SSL key to use, if any, for proxy-to-client requests.--client-ssl-cert<certfile> β SSL certificate to use, if any, for proxy-to-client requests.--client-ssl-ca<ca-file> β SSL certificate authority, if any, for proxy-to-client requests.--client-ssl-request-certβ requests SSL certs to authenticate clients for API requests. (yes, it says API requests. that's what it says. we don't question the queen. π)--client-ssl-reject-unauthorizedβ rejects unauthorized SSL connections, and same rule as always: only meaningful if--client-ssl-request-certis given.--default-target<host> β the default proxy target, written asproto://host[:port].--error-target<host> β an alternate server for handling proxy errors, written asproto://host[:port].--error-path<path> β an alternate server for handling proxy errors, written asproto://host[:port].--redirect-port<redirect-port> β redirects HTTP requests on this port over to the server on HTTPS. glow up to TLS. β¨--redirect-to<port> β redirects HTTP requests from--redirect-portto this port.--pid-file<pid-file> β writes our PID to a file. she's documenting herself. main character behavior. π--no-x-forwardβ don't add'X-forward-'headers to proxied requests.--no-prepend-pathβ avoids prepending target paths to proxied requests.--no-include-prefixβ don't include the routing prefix in proxied requests.--auto-rewriteβ rewrites theLocationheader host/port in redirect responses. sneaky, helpful, iconic.--change-originβ changes the origin of the host header to the target URL.--protocol-rewrite<proto> β rewrites theLocationheader protocol in redirect responses to the specified protocol.--custom-header<header> β a custom header to add to proxied requests. use the same option again for multiple headers, like--custom-header k1:v1 --custom-header k2:v2. default:{}. π--insecureβ disables SSL cert verification.
ngl bestie, turning off cert verification is exactly as unserious as it sounds. she's allowed to do it. that doesn't mean it's a good idea. π
--host-routingβ uses host routing, meaning the host becomes the first level of the path.--metrics-ip<ip> β IP for the metrics server. default:"".--metrics-port<n> β port of the metrics server. defaults to no metrics server at all, which is very "I'm booked and busy". β--log-level<loglevel> β log level, one ofdebug,info,warn,error. default:"info".--timeout<n> β timeout (in millis) when the proxy drops a connection for a request.--proxy-timeout<n> β timeout (in millis) when the proxy receives no response from the target.--storage-backend<storage-class> β defines an external storage class. defaults toin-MemoryStore.-h,--helpβ displays help for the command. when in doubt, ask her directly. π
and that's the whole page, bestie, every single flag, untouched and unskipped. π
configurable-http-proxy 4.5.3 π β that's the version, and this whole page is dated March 2023. go forth and proxy. periodt. π β¨
π¦ where this page comes from
- ubuntu noble: node-configurable-http-proxy 4.5.3+~cs15.2.4-3ubuntu1 Β· BSD-3-Clause
- ubuntu resolute: node-configurable-http-proxy 4.5.3+~cs15.2.4-3ubuntu1 Β· BSD-3-Clause
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms