We have moved!
We have moved to new home. For most up-to-date information , please visit aralez.rs
What is Aralez?
Aralez = ิฑึีกีฌีฅีฆ โ Named after the legendary Armenian guardian spirit, a winged dog-like creature that descends upon fallen heroes to lick their wounds and resurrect them.
Built on Rust, on top of Cloudflare’s Pingora engine, Aralez delivers world-class performance, security and scalability โ right out of the box.
Support the project:
Key Features
Remote Config API
Upstreams can be updated live via API โ no restart required.
Dynamic Config Reloads
Upstreams are automatically reloaded on config file change โ no restart required.
TLS Termination
Automatic certificate loading from folder, without a restart.
Zero-Config Protocols
Automatic WebSocket, gRPC, HTTP/2 and SSL upstream detection โ zero configuration needed.
Built-in Authentication
Basic Auth, API Key via x-api-key header, and JWT verification with token issuance.
Load Balancing
Round-robin, failover with health checks, and sticky sessions via cookies.
Prometheus Metrics
Built-in metrics endpoint for monitoring, alerting, and performance analysis.
Built-in Rate Limiter
Per virtualhost and per-path rate limiting. Path limits override global limits.
Kubernetes & Consul
Dynamic pod discovery and health-checked routing via Consul and Kubernetes integration.
Memory Safe
Created purely in Rust with Pingora and tokio for async I/O and high performance.
Hot Reload
- Changes to
upstreams.yamlare applied immediately. - No need to restart the proxy โ just save the file.
- If
consulprovider is chosen, upstreams will be periodically updated from Consul’s API.
TLS Support
To enable TLS for a proxy server (currently only OpenSSL is supported):
- Set
proxy_address_tlsinmain.yaml - Provide
tls_certificateandtls_key_file
Remote Config API
Push new upstreams.yaml over HTTP to config_address (:3000 by default). Useful for CI/CD automation or remote config updates. The URL parameter key=MASTERKEY is required โ its value matches master_key in main.yaml.
curl -XPOST --data-binary @./etc/upstreams.txt 127.0.0.1:3000/conf?key=${MASTERKEY}
License
Notes
- Uses Pingora under the hood for efficiency and flexibility.
- Designed for edge proxying, internal routing, or hybrid cloud scenarios.
- Transparent, fully automatic WebSocket upgrade support.
- Transparent, fully automatic gRPC proxy.
- Sticky session support.
- HTTP/2 ready.
About this site
- This is a static HTML site generated by Hugo .
- It’s being served by built in static content sever of Aralez.
- Let’s encrypt certificate is generated and renewed by Aralez.
- 10 requests per second limit is set. Each clean refresh is approx 3 requests.
- After hitting
SHIFT REFRESHseveral time and you will see :HTTP ERROR 429. - Wait a second and refresh again.
- After hitting