Why We Built Our Own Machine Proxy

When I started thinking about exposing services from machines, one plain question kept showing up: How does traffic reach a machine? That question sounds smaller than it is. Public ingress is not just HTTP. It is TLS, SNI, raw TCP, SSH, WebSSH, machine ownership, and route cleanup when the guest disappears in the middle of the day. That is a lot of stuff to hand-wave. In this post, I want to…