Configuration Details
Proxy Configuration
The Proxy requires configuration of host and upstreamURL to be able to authenticate requests and send them to the desired existing services.
The auth-server proxy can also be configured by inserting tls certificates.
Corsha Authenticator application parameters
| Name | Description | Value |
|---|
authenticator.listen | Internal listen address for REST Authenticator Service. This service can provide Corsha Creds to be manually inserted by an HTTP client. | "0.0.0.0:8081" |
authenticator.loggingLevel | Internal log level for Corsha Authenticator | "info" |
authenticator.writeTime | How often a Corsha Authenticator will write to its stream on the DLN. This can be lowered for higher-security needs or raised to increase performance. This is a Go-formatted Duration string. | "2h" |
authenticator.streamsDir | Path in Corsha Authenticator where the stream will be stored. This does not ordinarily need to be overridden. | "/opt/corsha/authenticator" |
Authenticator Egress Proxy application parameters
| Name | Description | Value |
|---|
listen | The listen address for the Authenticator proxy, automatically inserting X-Corsha-Cred headers into outgoing HTTP requests | "0.0.0.0:8080" |
authenticator.authServerTrustedMachine.url | A host:ip pairing that resolves to the Corsha Auth Server's Trusted Machine service | "" |
authenticator.authServerUntrustedMachine.url | A host:ip pairing that resolves to the Corsha Auth Server's Untrusted Machine service, which is used for bootstrapping the connection to the Trusted Machine service | "" |
authenticator.proxies | A set of outbound hosts to forward Corsha-enabled traffic to. | {} |
Authenticator Egress Proxy application parameters for each proxy
Multiple hosts may be proxied by creating uniquely-named proxies in the authenticator.proxies map, with the following attributes:
| Proxy Attribute | Description | Value |
|---|
host | The address that will serve as a Corsha egress proxy, automatically inserting X-Corsha-Cred headers into outgoing HTTP requests | "" |
upstreamURL | The upstream URL that the egress proxy should forward Corsha-enabled HTTP requests to | "" |