Reverse Proxy / Gateway

NK reverse proxy is the 80/443 ingress routing core — all client traffic hits the proxy before being routed to specific sites.

Three kinds

  • microservice — NK's own Rust-based high-perf gateway (recommended paid). Includes WAF + cache + JA3 + GeoIP.
  • nginx — standalone nginx instance (legacy)
  • haproxy — HAProxy instance (high-concurrency L4)

99% of customers use microservice. See Microservice Gateway.

Key fields (api/reverse-proxy/create)

  • name / kind / listen_ip / listen_port (80) / ssl_enabled (true)
  • ssl_certificate_id — cert ID, auto-attached after issuance
  • ssl_listen_port (443)
  • domains — server_name space-separated
  • backends array — kind:internal/external + website_id + host_header + weight

Multiple backends → NK auto weighted round-robin LB.