Harbor Proxy Cache

Definition

Harbor Proxy Cache is a feature of Harbor, an open-source container image registry, that allows users to cache images from a remote registry locally. This reduces bandwidth usage and improves access speed by storing frequently accessed images closer to the point of use. It also provides resilience against network outages and remote registry downtimes.

Secure Settings Example

proxy_cache:
  enabled: true
  registry_url: "https://registry-1.docker.io"
  verify_cert: true
  cache_ttl: 3600
  auth:
    username: "proxy_user"
    password: "secure_password"

In this example, the proxy cache is enabled with certificate verification, a time-to-live (TTL) for cached images, and secure authentication credentials.

Insecure Settings Example

proxy_cache:
  enabled: true
  registry_url: "https://registry-1.docker.io"
  verify_cert: false
  cache_ttl: 0
  auth:
    username: "proxy_user"
    password: "password"

This configuration is insecure due to disabled certificate verification, a TTL of zero (which effectively disables caching), and weak authentication credentials.