Sozu HTTP Reverse Proxy / Load Balancer on Ubuntu 24.04 LTS

Why the cloudimg image

The cloudimg image installs Sozu from the pinned upstream crate and runs it as the unprivileged sozu user, binding ports 80 and 443 through the CAP_NET_BIND_SERVICE Linux capability rather than as root. It is secure by default: the command and control channel is a local Unix socket only, never exposed on the network, so the proxy cannot be reconfigured remotely, and a per-VM self-signed TLS certificate is generated on first boot so no shared TLS material ships in the image. The appliance is functional out of the box, shipping a self-contained local backend and a default cluster so an on-box request returns a real HTTP body through Sozu immediately; you then point it at your own backends with one config edit and a zero-downtime reload. The paired deployment guide covers confirming the service, proving a request flows through the proxy, adding your own backends, and reconfiguring the live proxy from the CLI, and every deployment carries 24/7 support.