First proxy
Create cluster and destinations
Point ShieldGate at your upstream application instances.
Goal
Create a cluster and at least one destination so YARP knows where to forward.
Prerequisites
- Host created (not strictly required for the cluster object, but needed for the full path).
- Upstream reachable from the Proxy process (Docker networking matters in Compose).
Steps (console)
- Open Topology → Clusters.
- Create a cluster (name it after the app, for example
web-app). - Configure load balancing if prompted (defaults are fine for one destination).
- Open the cluster’s Destinations and add an address such as
http://host.docker.internal:5000orhttp://127.0.0.1:5000. - Optionally enable active health checks and timeouts.
- Save.
What destinations represent
Each destination is an upstream endpoint. Multiple destinations enable load balancing and failover according to cluster settings.
Verify
- Cluster shows one healthy (or at least configured) destination.
- From the Proxy host,
curlthe destination URL to confirm network reachability.
Pitfalls
localhostinside a container is the container itself—not your laptop. Prefer service names orhost.docker.internalon Docker Desktop.- HTTPS upstreams need valid certs or appropriate transform/skip settings for labs.