-
-
Notifications
You must be signed in to change notification settings - Fork 4.6k
Description
Expose both https and http ports for localstack services.
Use Case:
I have a dotnet application that consumes a kinesis stream using the KCL/multilang daemon and writes to dynamoDb.
- The java multilang-daemon requires kinesis be on https (java has option to bypass cert validation)
- the dotnet sdk doesn't support bypassing cert verification
Work Arounds:
-
Generate stable certificate for local stack to use, then import that certificate into the alpine base image trust store, now the cert is trusted and all is well. But, on windows (its fine on mac) the localstack kinesis reliably fails to start with an external data directory. So to get round this i need to add an extra layer to the localstack docker image to docker add in the certificate rather than using a volume. This works but it's getting a bit gross/rube goldberg.
-
An alternative we tried was using nginx as a proxy so it would terminate https and pass traffic through to the localstack ports. This works well, but is another container to run and maintain.
Suggestion
Allow localstack to be configured to run with dual ports, possibly offset by 1000 from each other, one that uses http and one that doesn't. This will allow apps that require https to exist alongside apps that make it very hard to support self signed certs thus would prefer http.