Skip to content

Enable SSL and non SSL operation at the same time #1245

@williamdenton

Description

@williamdenton

Expose both https and http ports for localstack services.

Use Case:

I have a dotnet application that consumes a kinesis stream using the KCL/multilang daemon and writes to dynamoDb.

  • The java multilang-daemon requires kinesis be on https (java has option to bypass cert validation)
  • the dotnet sdk doesn't support bypassing cert verification

Work Arounds:

  • Generate stable certificate for local stack to use, then import that certificate into the alpine base image trust store, now the cert is trusted and all is well. But, on windows (its fine on mac) the localstack kinesis reliably fails to start with an external data directory. So to get round this i need to add an extra layer to the localstack docker image to docker add in the certificate rather than using a volume. This works but it's getting a bit gross/rube goldberg.

  • An alternative we tried was using nginx as a proxy so it would terminate https and pass traffic through to the localstack ports. This works well, but is another container to run and maintain.

Suggestion

Allow localstack to be configured to run with dual ports, possibly offset by 1000 from each other, one that uses http and one that doesn't. This will allow apps that require https to exist alongside apps that make it very hard to support self signed certs thus would prefer http.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions