Sentinel
a Pingora-based reverse proxy (inspired by River)
Details
- External ID
- 46882701
- Source
- HN
- Company
- —
- Product
- Sentinel
- Website domain
- raskell.io
- Launched
- Feb. 4, 2026
- Cohort
- —
- Upvotes
- 8
- Upvotes percentile
- 0.4393530997304582
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:26 p.m.
- Updated at
- Sept. 7, 2026, 9:26 p.m.
Description
I’d been watching River (Pingora-based) and hoping it would mature, because I think Rust + Pingora (from Cloudflare) is a really solid foundation for a future-proof reverse proxy. Progress stayed quiet, so I started building the “practical reverse proxy layer” on top of Pingora myself: config/routing + operational defaults + a way to plug in extra request/response logic without patching the core.Sentinel: https://github.com/raskell-io/sentinelRiver: https://github.com/memorysafety/riverQuick try:curl -fsSL https://getsentinel.raskell.io | shIf you’ve operated proxies: what’s one default you’d change to make them less surprising (timeouts, retries, header handling, etc.)?
Enrichment
- Theme
- proxy, dns, and networking tools
- Vertical
- Horizontal
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- reverse proxy server
- Manually corrected
- False
Could you build this?
Partial While Pingora provides the low-level proxy framework, writing a reliable reverse proxy with hot-reloads, custom load balancing, and plugin architectures demands solid systems-level Rust programming.
What it would actually take: The stack centers on Rust using Cloudflare's Pingora library, tokio async runtime, dynamic config parsers (YAML/TOML/K8s CRDs), and IPC for isolated worker agents. The difficult parts include safe dynamic hot-reloading of configurations without dropping connections, handling graceful TLS certificate rotation, and safely running isolated extensibility plugins without performance regressions. This requires specialized network systems engineering and Rust concurrency expertise.
Discussion
5 comments analyzed.
Competitors mentioned: ModSecurity, Envoy ext_proc filter, nginx modules
Concerns raised: Memory leaks causing OOM over time, Header spoofing and tenant-unaware caching vulnerabilities, Crashes and latency spikes from in-process plugins
Feature requests: Tenant-aware RBAC enforcement at proxy level, Explicit fail-open/fail-closed configuration options
Competitors
Other products that read as similar to this one — 87 launches clear the similarity bar, closest 8 shown.
Attention rank: #54 of 88 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 88 days after the earliest competitor.
- SentinelGateway · ph · 2026-09-08 · 1 upvotes · similarity 0.45
- Ping6.it · hn · 2026-01-09 · 6 upvotes · similarity 0.42
- BurrowGate · ph · 2026-09-09 · 4 upvotes · similarity 0.41
- I built a DNS resolver from scratch in Rust · hn · 2026-04-02 · 115 upvotes · similarity 0.40
- Server Config Generator · ph · 2026-09-29 · 2 upvotes · similarity 0.40
- proxy-telegram.github.io · github · 2026-09-25 · 47 upvotes · similarity 0.40
- gozarbin · github · 2026-09-16 · 9 upvotes · similarity 0.39
- HTTP/3 and raw QUIC client/server APIs for Node.js · hn · 2026-06-08 · 16 upvotes · similarity 0.39
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.