HTTP Request isolation using docker
Thu, May 28, 2015
One-minute read
There are some inherit security benefits to this in that each request is within its own garden. One of the downsides is how grossly inefficient it is. Either way it sounded like a fun project to hack at on a rainy day.
Almost a year later the rainy day finally happened.
https://github.com/jeefy/strobe
I wouldn't even call this in "alpha" stage. As a proof of concept it is a nice launching point. In the future I'm hoping to put time into expanding it's flexibility. Being able to dynamically change what container runs, and instead of per-request, handle per-session.
Docker continues to amaze, and DockerCon 2015 should be a fantastic experience.