Support for enterprise use with all http calls through internal mirrors/caches

[scr-oath]

Is your feature request related to a problem? Please describe

It would be really great to support internal mirroring of the asdf plugins as well as the download of the tools so that an enterprise wishing to build things could not make any external requests beyond the mirrors.

Some of the ideas would be

1. configuration - .asdfrc? some global location?
2. mirroring - the ability to mirror all or parts of the plugins and tools
3. ensuring that every download or query examines the mirror

Describe the proposed solution

1. Add configuration to ~/.asdfrc or possibly a global location as well (when using docker images, would be nice to configure all access regardless of the user) that configures locations of mirror or mirrors for various pieces - plugins, tools
2. Ensure that mirroring is possible and documented for an organization to either mirror regularly or "passthrough cache"

Describe similar asdf features and why they are not sufficient

I don't see similar features

Describe other workarounds you've considered

Possibly setting up a proxy of some sort could cache - like a squid proxy, but would require forcing asdf to use it.

[sgtsquiggs]

👍

we'd love to see this work with artifactory

thinking about how to make that work - a modified asdf could download the binaries/archives for X,Y,Z platform/architecture and then mirror them to artifactory. the same modified asdf could allow for an artifactory (http/ftp/whatever) to be configured as mirrors for all things.

[janderssonse]

Would Love to see this. it would allow asdf to reach developers in places which have strict security policies regarding origins, while pleasing any internal plat/sec-team

[scr-oath]

Artifactory can have read through caches (easier than full-fledged mirror) so if asdf could have some config file that altered the URL, that could be enough