[Design Proposal] Cross-VM Service communication with mTLS using Caddy - #1182
Draft
mayuka-c wants to merge 2 commits into
Draft
[Design Proposal] Cross-VM Service communication with mTLS using Caddy#1182mayuka-c wants to merge 2 commits into
mayuka-c wants to merge 2 commits into
Conversation
mayuka-c
commented
Jul 27, 2026
mayuka-c
commented
Member
- Enabling cross service VM communication (between control plane and services on worker nodes) using Caddy as reverse_proxy.
- Uses mTLS for secure communication.
- Defines public, private ingress and egress blocks for proxy.
Signed-off-by: mayuka-c <Mayuka.C@ibm.com>
There was a problem hiding this comment.
Pull request overview
Adds a design proposal describing how the AI-Services platform can enable cross-VM service communication using Caddy as ingress/egress reverse proxy with mTLS, including PKI bootstrapping and dynamic route registration via the Caddy Admin API.
Changes:
- Documents VM roles, ports/listeners, and traffic flows for public HTTPS and private mTLS routing.
- Specifies a CA/root + per-VM cert model and an onboarding/bootstrap flow for certificate provisioning.
- Provides example Caddy JSON configurations and an Admin API route-registration approach.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
|
||
| ## 7. Caddy Configuration | ||
|
|
||
| All Caddy configuration is applied via the Admin API (`POST /config/` or `POST /load`). The examples below show the full JSON payload for each VM role. |
Signed-off-by: mayuka-c <Mayuka.C@ibm.com>
mayuka-c
changed the title
mayuka-c
marked this pull request as ready for review
July 29, 2026 08:18
Member
Author
|
Moving this to draft as this will be work for 4Q26 |
mayuka-c
marked this pull request as draft
August 13, 2026 13:42
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.