Enterprise Traffic Gateway

MSNova Gateway

A lightweight reverse proxy gateway for CloudPanel servers, built for clean routing, backend health checks, automatic failover and gateway-level SSL.

Install Gateway View Architecture

$ curl -fsSL https://install.msnet.my/msnovagw/install.sh | sed 's/\r$//' | sudo bash MSNova Gateway Installer Ubuntu 24.04 + Nginx + PHP-FPM Reverse Proxy + Health + Failover Status: Ready

Overview

Simple, focused and easy to maintain.

MSNova Gateway does not replace CloudPanel. It sits in front of CloudPanel and handles traffic routing, gateway visibility and high availability.

MSNova Gateway

Owns reverse proxy routing, gateway SSL, health checks, failover groups, worker queue and gateway logs.

CloudPanel

Continues managing websites, website SSL, PHP, databases, file management, cron jobs and email.

MSNova

Manages servers, SSH, dynamic IP, maintenance, backups, services, monitoring and automation.

Architecture

One gateway, multiple backend servers.

Route public websites through a single gateway while CloudPanel servers continue doing the actual hosting work.

Internet
    │
    ▼
MSNova Gateway
    │
    ├── shop.company.com  ──► CloudPanel 1
    ├── crm.company.com   ──► CloudPanel 1
    ├── api.company.com   ──► CloudPanel 2
    └── blog.company.com  ──► CloudPanel 2

Features

Everything needed for a clean traffic gateway.

Built with a queue-based worker engine so privileged operations are handled safely outside normal web requests.

Reverse Proxy Routes

Add public domains and map them to CloudPanel 1, CloudPanel 2 or any backend server reachable by the gateway.

Gateway SSL

Manage SSL only for the gateway hostname. Website certificates remain owned by CloudPanel.

Health Checks

Run HTTP, HTTPS, TCP and ping checks against backend nodes.

Automatic Failover

Switch routing to a backup CloudPanel server when the primary backend becomes unavailable.

Worker Queue

Queue route updates, SSL actions, health checks and failover operations for safe background execution.

Gateway Logs

Review routing events, worker output, SSL actions, health checks and gateway activity in one place.

SSL Model

Gateway SSL and website SSL stay separate.

MSNova Gateway owns only its own certificate. CloudPanel continues to manage website certificates for customer domains.

Gateway SSL

Example: gateway.company.com
Managed by MSNova Gateway.

Website SSL

Example: shop.company.com
Managed by CloudPanel.

Recommended Mode

Start with SSL pass-through so CloudPanel continues serving website certificates directly.

Why Gateway?

Less manual work, more visibility.

Without Gateway	With MSNova Gateway
Manual Nginx configuration	Route manager with worker execution
No clear backend health status	Built-in health checks
Manual failover	Automatic failover groups
Scattered logs	Gateway logs and queue output
Hard to manage multiple CloudPanel servers	One lightweight gateway in front

Install

Install on Ubuntu 24.04.

The installer configures Nginx, PHP-FPM, MariaDB, Certbot, the database, config file and gateway worker timer.

$ curl -fsSL https://install.msnet.my/msnovagw/install.sh | sed 's/\r$//' | sudo bash

Roadmap

Built light now, expandable later.

Version 1

Reverse proxy routes, backend nodes, gateway SSL, health checks, failover groups, worker queue and logs.

Version 2

CloudPanel sync, DNS provider integration, API access, route templates and better metrics.

Future

Multi-gateway clusters, advanced traffic policy, maintenance routing and central MSNova management.