镜像概览

完整引用
docker.io/livekit/caddyl4
Registry
docker.io
命名空间
livekit
仓库
caddyl4
已缓存 Tag 数
11
最近同步
07/06/2026, 04:34 PM

简介

LiveKit 官方 Caddy L4 代理镜像,为 WebRTC/SFU 流量做 TLS 终结与四层转发,常部署在 LiveKit 集群入口前。

详细介绍

livekit/caddyl4 基于定制 Caddy,按 LiveKit 约定加载 Caddyfile 或环境变量,将 443/7881 等端口的 QUIC/TCP 流量转发至后端 LiveKit Server 或 TURN。镜像无状态,配置变更后 reload 即可。与通用 nginx stream 相比与 LiveKit 证书自动续期集成更紧;生产应固定 tag、挂载 TLS 证书或启用 ACME,并在 K8s 中以 DaemonSet 或 LoadBalancer Service 暴露 UDP/TCP 双栈端口。

快速启动

docker run -d --name livekit-caddyl4 \
  -p 443:443 -p 7881:7881 \
  -e LIVEKIT_HOST=livekit.internal:7880 \
  docker.io/livekit/caddyl4:latest

推荐实践

docker run -d --name livekit-caddyl4 \
  --restart unless-stopped \
  -p 443:443 -p 7881:7881/udp -p 7881:7881/tcp \
  -v /data/caddy/certs:/certs:ro \
  -v /data/caddy/Caddyfile:/etc/caddy/Caddyfile:ro \
  docker.io/livekit/caddyl4:v1.0.0

核心参数说明

  • -p 443:443 — HTTPS/WSS 入口
  • -p 7881:7881/tcp+udp — WebRTC 媒体与信令转发
  • -v .../Caddyfile:... — L4 路由与 upstream 配置
  • -v .../certs:/certs:ro — TLS 证书(若不用 ACME)
  • --restart unless-stopped — 实时通信入口高可用
  • 固定 tag — 与 LiveKit Server 发行版联调

Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: livekit-caddyl4
spec:
  replicas: 2
  selector:
    matchLabels:
      app: livekit-caddyl4
  template:
    metadata:
      labels:
        app: livekit-caddyl4
    spec:
      containers:
        - name: caddyl4
          image: docker.io/livekit/caddyl4:v1.0.0
          ports:
            - containerPort: 443
            - containerPort: 7881
              protocol: TCP
            - containerPort: 7881
              protocol: UDP
          volumeMounts:
            - name: caddyfile
              mountPath: /etc/caddy/Caddyfile
              subPath: Caddyfile
      volumes:
        - name: caddyfile
          configMap:
            name: livekit-caddyfile
---
apiVersion: v1
kind: Service
metadata:
  name: livekit-caddyl4
spec:
  type: LoadBalancer
  selector:
    app: livekit-caddyl4
  ports:
    - port: 443
      targetPort: 443
    - port: 7881
      targetPort: 7881
      protocol: TCP

UDP 7881 需在云 LB 与防火墙放行;证书可经 cert-manager 写入 Secret 后挂载,upstream 指向 livekit-server Service。

最新 Tag(20 条)

查看全部 11 个 Tag →
Tag架构推送时间大小Digest同步期望操作
docker.io/livekit/caddyl4
:latest
linux/amd64linux/arm64
2026/06/04 11:2220.4 MBsha256:b7f1781f901d
docker.io/livekit/caddyl4
:v2.11
linux/amd64linux/arm64
2026/06/04 11:2220.4 MBsha256:b7f1781f901d
docker.io/livekit/caddyl4
:v2.11.3
linux/amd64linux/arm64
2026/06/04 11:2220.4 MBsha256:b7f1781f901d
docker.io/livekit/caddyl4
:v2.10
linux/amd64linux/arm64
2025/10/15 05:0519.3 MBsha256:d8ff013ef6da
docker.io/livekit/caddyl4
:v2.10.2
linux/amd64linux/arm64
2025/10/15 05:0519.3 MBsha256:d8ff013ef6da
docker.io/livekit/caddyl4
:v2.6
linux/amd64linux/arm64
2023/01/26 07:3017.4 MBsha256:65a11cea656b
docker.io/livekit/caddyl4
:v2.6.2
linux/amd64linux/arm64
2023/01/26 07:300.0 MBsha256:d2a880b2f3ed
docker.io/livekit/caddyl4
:v2.5
linux/amd64linux/arm64
2022/06/25 11:3515.3 MBsha256:59afc4338bcd
docker.io/livekit/caddyl4
:v2.5.1
linux/amd64linux/arm64
2022/06/25 11:3515.3 MBsha256:59afc4338bcd
docker.io/livekit/caddyl4
:v2.4
linux/arm64linux/amd64
2022/01/18 16:2113.0 MBsha256:64ce68778cfd
docker.io/livekit/caddyl4
:v2.4.6
linux/amd64linux/arm64
2022/01/18 16:2114.0 MBsha256:ce5f8279ab27