Install nginx on an existing asp.net core docker container

Question

I'm currently running a docker container for an ASP.NET Core WebAPI project. This web service is currently exposed on port 80.

My dockerfile looks like this:

FROM microsoft/dotnet:2.1-aspnetcore-runtime
ARG source
WORKDIR /app
EXPOSE 80
COPY ${source:-obj/Docker/publish} .
ENTRYPOINT ["dotnet", "testapi.dll"]

I'd like to install nginx as a layer between the service and the exposed public network.

The final result should be ASP.NET running on port 90 which is internal only and an nginx webserver forwarding the local 90 to public 80 port.

Is this possible? if so, how can I achieve such architecture? btw, I'm completely aware of the overhead caused by an extra layer.

Thanks!

Neekoy · Accepted Answer · 2018-07-10 13:59:42Z

11

The Docker way to do this would be to have two containers for the two services. Docker-compose is a tool that helps manage multi-container applications.

The following docker-compose.yml should work for you:

version: '3'

services:
  app:
    build:
      context: ./dotnet
      dockerfile: Dockerfile
    expose:
      - "80"

  proxy:
    build:
      context: ./nginx
      dockerfile: Dockerfile
    ports:
      - "80:80"
    links:
      - app

Basically we expose the port for your app so the Nginx container can access it, and then we bind the port on the Nginx container to the one on your host machine.

You put your Dockerfile and app in the "dotnet" folder, and your NginX logic in the /nginx/Dockerfile file.

EDIT: If you would really like to have both services in a single container you can use the following:

FROM microsoft/dotnet:2.1-aspnetcore-runtime

ENV ASPNETCORE_URLS https://*:8080

RUN apt update && \
    apt install nginx
ADD nginx-website.conf /etc/nginx/sites-enabled
RUN service nginx restart

ARG source
WORKDIR /app
EXPOSE 80
COPY ${source:-obj/Docker/publish} .
ENTRYPOINT ["dotnet", "testapi.dll"]

At this point you just need to create the Nginx config file "nginx-website.conf" and set up the reverse proxy for port 80 to 8080.

edited Jul 10, 2018 at 13:59

answered Jul 10, 2018 at 12:14

Neekoy

2,5625 gold badges36 silver badges54 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

NOP-MOV Over a year ago

Thanks. This means I must run two different containers. Is there a way of installing both nginx as a front facing facade and IIS/Kestrel as an internal only port on one single docker? this setup should be scaled out so I wouldn't want to create two different containers per one logical unit. Thanks.

Neekoy Over a year ago

Well generally the Docker way is one application per container, so it's advised to run it as above. I'm out for lunch but when I get back I'll edit my post with a one container solution.

Neekoy Over a year ago

@NOP-MOV I edited my post with a solution for a single container.

b01 Over a year ago

@NOV-MOV Running your app in one container does not make it less scalable, but more debuggable (easier to see which app has a problem) and fault tolerant (one app crashing does not cause both to crash).

user3724031 · Accepted Answer · 2019-05-22 22:12:35Z

0

It would be better to set at the application gateway level (like Kong, Tyk.io, Aws, Azure) rather than on individual services.

For example Kong uses nginx, you can configure the nginx to do the response compression. Set the following environment variables

  - KONG_NGINX_HTTP_GZIP="on"
  - KONG_NGINX_HTTP_GZIP_TYPES="*" # for all requests, you can add specific mime-type as you want.
  - KONG_NGINX_HTTP_GZIP_PROXIED="any"
  - KONG_NGINX_HTTP_GZIP_MIN_LENGTH="1000"

You can find more details on kong/nginx configuration at https://docs.konghq.com/1.0.x/configuration/#injecting-nginx-directives http://nginx.org/en/docs/http/ngx_http_gzip_module.html

answered May 22, 2019 at 22:12

user3724031

2551 gold badge3 silver badges8 bronze badges

1 Comment

NOP-MOV Over a year ago

Thanks, but in this specific case my goal is protecting the docker itself from the orchestrator. We also deploy a WAF externally.

Collectives™ on Stack Overflow

Install nginx on an existing asp.net core docker container

2 Answers 2

4 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

4 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related