Skip to main content

Self-hosted Temporal Nexus

View Markdown
NEW TO NEXUS?

This page explains how to self-host Nexus. To learn about Nexus, see the how Nexus works page. To evaluate whether Nexus fits your use case, see the evaluation guide.

Enable Nexus​

Nexus can be configured by setting static configuration and dynamic configuration entries.

info

Replace $PUBLIC_URL with a URL value that's accessible to external callers or internally within the cluster. Currently, external Nexus calls are considered experimental so it should be safe to use the address of an internal load balancer for the Frontend Service.

To enable Nexus in your deployment:

  1. Enable the HTTP API in the server's static configuration.

    services:
      frontend:
        rpc:
          # NOTE: keep other fields as they were
          httpPort: 7243

    clusterMetadata:
      # NOTE: keep other fields as they were
      clusterInformation:
        active:
          # NOTE: keep other fields as they were
          httpAddress: $PUBLIC_URL:7243

  2. Set the required dynamic configuration

    1. Prior to version 1.30.X, you must set the public callback URL and the allowed callback addresses.

      NOTE: the callback endpoint template and allowed addresses should be set when using the experimental "external" endpoint targets.

      component.nexusoperations.callback.endpoint.template:
        # The URL must be publicly accessible if the callback is meant to be called by external services.
        # When using Nexus for cross namespace calls, the URL's host is irrelevant as the address is resolved using
        # membership. The URL is a Go template that interpolates the `NamepaceName` and `NamespaceID` variables.
        - value: https://$PUBLIC_URL:7243/namespaces/{{.NamespaceName}}/nexus/callback
      component.callbacks.allowedAddresses:
        # Limits which callback URLs are accepted by the server.
        # Wildcard patterns (*) and insecure (HTTP) callbacks are intended for development only.
        # For production, restrict allowed hosts and set AllowInsecure to false
        # whenever HTTPS/TLS is supported. Allowing HTTP increases MITM and data exposure risk.
        - value:
            - Pattern: "*" # Update to restrict allowed callers, e.g. "*.example.com"
              AllowInsecure: true # In production, set to false and ensure traffic is HTTPS/TLS encrypted

    2. Version 1.30.X+: Nexus is enabled by default. Only the system callback URL is needed.

      component.nexusoperations.useSystemCallbackURL:
        - value: true

Build and use Nexus Services​

See how Nexus works for an architectural overview, then follow an SDK guide to build your first Nexus Service.

SDK GUIDES

Global Namespaces (multi-region failover)​

Nexus works across a Global (multi-region) Namespace. An asynchronous Nexus Operation started in one Cluster completes even if the Namespace fails over, or its Cluster is lost, before the Operation finishes.

Endpoint target types

This applies to Worker-target Endpoints, where the Endpoint routes to a target Namespace and Task Queue that a Worker polls. Endpoints can also target an external URL (--target-url), which is experimental and not covered here.

Configuration​

  1. Set up Multi-Cluster Replication. See Multi-Cluster Replication for connecting Clusters and creating replicated Namespaces.

  2. Advertise a frontend HTTP address on every Cluster. Extend the httpPort and clusterInformation.<cluster>.httpAddress from Enable Nexus to every Cluster, each with its own address.

  3. Register Endpoints on every Cluster. The Nexus Endpoint registry isn't replicated across Clusters. Create the same Endpoints (same target Namespace and Task Queue) on each Cluster.

  4. Cross-Cluster forwarding. Nexus request and callback forwarding is on by default via system.enableNamespaceNotActiveAutoForwarding (per-Namespace dynamic config). Optionally, set the server's dcRedirectionPolicy to all-apis-forwarding so client requests also forward to the active Cluster when it connects to a standby.

What to expect on failover​

For a Nexus Operation started before a Cluster failover completes on the new active Cluster, the completion callback is delivered to the caller Namespace's current active Cluster, re-resolved on each attempt: