xTag

Overview

Full name
docker.io/ohttps/ohttps-openresty
Registry
docker.io
Namespace
ohttps
Repository
ohttps-openresty
Cached tags
2
Last synced
07/06/2026, 12:07 PM

Introduction

OHTTPS OpenResty 镜像，在 Nginx/OpenResty 上集成 OHTTPS 协议支持，用于低延迟 Web 代理与边缘加速场景。

Details

ohttps/ohttps-openresty 基于 OpenResty 构建，预置 OHTTPS 相关模块与 Lua 脚本，便于在边缘节点部署新型传输协议网关。典型用于实验性 Web 加速或协议迁移 PoC，与标准 nginx 镜像相比配置更专用。生产应固定 tag、TLS 证书 volume 挂载并限制管理接口，按流量调 worker 与连接数。

快速启动

docker run -d --name ohttps-openresty \
  -p 443:443 -p 80:80 \
  -v $(pwd)/nginx.conf:/etc/nginx/nginx.conf:ro \
  docker.io/ohttps/ohttps-openresty:latest

推荐实践

docker run -d --name ohttps-openresty \
  --restart unless-stopped \
  -p 443:443 -p 80:80 \
  -v /data/ohttps/certs:/etc/nginx/certs:ro \
  -v /data/ohttps/conf:/etc/nginx/conf.d:ro \
  docker.io/ohttps/ohttps-openresty:1.0.0

核心参数说明

  • -p 443:443 -p 80:80 — HTTPS/HTTP 入口
  • -v .../certs:... — TLS 证书只读挂载
  • -v .../conf:... — 站点与 upstream 配置
  • --restart unless-stopped — 边缘网关持续在线
  • 固定 tag — OpenResty/OHTTPS 模块 pin
  • TLS — 生产使用有效证书

Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: ohttps-openresty
spec:
  replicas: 2
  selector:
    matchLabels:
      app: ohttps-openresty
  template:
    metadata:
      labels:
        app: ohttps-openresty
    spec:
      containers:
        - name: openresty
          image: docker.io/ohttps/ohttps-openresty:1.0.0
          ports:
            - containerPort: 443
            - containerPort: 80
          volumeMounts:
            - name: certs
              mountPath: /etc/nginx/certs
              readOnly: true
            - name: conf
              mountPath: /etc/nginx/conf.d
              readOnly: true
      volumes:
        - name: certs
          secret:
            secretName: ohttps-tls
        - name: conf
          configMap:
            name: ohttps-conf
---
apiVersion: v1
kind: Service
metadata:
  name: ohttps-openresty
spec:
  selector:
    app: ohttps-openresty
  ports:
    - port: 443
      targetPort: 443
    - port: 80
      targetPort: 80

LoadBalancer 或 Ingress 暴露 443；ConfigMap/Secret 管理配置与证书 rotation。

Latest tags (20)

View all 2 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/ohttps/ohttps-openresty
:latest
linux/amd64
2020/12/19 00:44239.6 MBsha256:7f72f8fa3be7…
docker.io/ohttps/ohttps-openresty
:1.0.0
linux/amd64
2020/12/19 00:43239.6 MBsha256:7f72f8fa3be7…