Cloud HTTPS Server Example

Demonstrates setting up a production-ready HTTP server for cloud deployment with TLS configuration, middleware stacking, health checks, and self-verification.

Features Covered

• TLS Configuration: Configure TLS certificates, protocol versions, and ALPN for use behind a reverse proxy.
• Middleware Stack: CORS, health-check (/health), readiness probe (/ready), and request logging.
• Route Registration: Path parameters, JSON responses, and 404 fallback handlers.
• Self-Test: Automatically verifies all endpoints after startup.
• Cloud Deployment Tips: Security groups, TLS certs, process management, and observability guidance.

Code Example

const std = @import("std");
const httpx = @import("httpx");

fn indexHandler(ctx: *httpx.Context) anyerror!httpx.Response {
    return ctx.json(.{
        .status = "ok",
        .service = "cloud-https-api",
        .version = "1.0.0",
    });
}

fn healthHandler(ctx: *httpx.Context) anyerror!httpx.Response {
    return ctx.json(.{ .status = "healthy" });
}

pub fn main() !void {
    var gpa: std.heap.DebugAllocator(.{}) = .init;
    defer _ = gpa.deinit();
    const allocator = gpa.allocator();

    var server = httpx.Server.initWithConfig(allocator, .{
        .host = "127.0.0.1",
        .port = 8443,
        .max_connections = 10000,
        .threads = 4,
        .http2_enabled = true,
        .keep_alive = true,
    });
    defer server.deinit();

    try server.use(httpx.cors(.{
        .allowed_origins = &.{"*"},
        .allowed_methods = &.{ "GET", "POST", "OPTIONS" },
        .allowed_headers = &.{ "Content-Type", "Authorization" },
        .max_age_seconds = 3600,
    }));

    try server.use(httpx.healthCheck(.{
        .path = "/health",
        .body = "{\"status\":\"ok\"}",
        .status = 200,
    }));

    try server.use(httpx.readinessProbe(.{
        .path = "/ready",
        .body = "{\"ready\":true}",
    }));

    try server.use(httpx.logger());

    try server.get("/", indexHandler);

    const thread = try server.listenInBackground();
    defer thread.join();
    defer server.stop();
}

Running the Example

zig build run-cloud_https_server

Cloud Deployment Notes

• Security Groups: Allow inbound TCP 443 from 0.0.0.0/0 (public) and internal traffic on the backend port.
• TLS Certs: Use Certbot / Let's Encrypt or a cloud LB with ACM. In production, TLS is terminated at the load balancer.
• Health Checks: Configure the LB to hit /health (liveness) and /ready (readiness).
• Process Management: Run under systemd (Restart=always) or a container orchestrator (Kubernetes, Nomad, ECS).