Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

proxies / reverseproxy / blockerbugs: have proxies return 421 for non iad2 access.

Browse source 
This is the fun firefox h2 connection reuse bug. blockerbugs is only in
iad2, so if firefox tries to reuse a connection to another proxy for it,
just send it a 421 so it knows thats bad on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-05-25 17:29:37 -07:00
parent 6d5911cc3c
commit 0302040f3c
3 changed files with 5 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/httpd/reverseproxy/templates/reversepassproxy.blockerbugs.conf Normal file
View file

@ -0,0 +1,5 @@
{% if 'iad2' in inventory_hostname %}
{% include "reversepassproxy.conf" %}
{% else %}
Redirect 421 /
{% endif %}

3
roles/httpd/reverseproxy/templates/reversepassproxy.fas3.conf
View file

@ -1,3 +0,0 @@
ProxyPass {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPassReverse {{localpath}} {{proxyurl}}{{remotepath}}
ProxyPreserveHost on

20
roles/httpd/reverseproxy/templates/reversepassproxy.sticky-notes.conf
View file

@ -1,20 +0,0 @@
<Location /394536/>
require all denied
</Location>
{% if header_scheme %}
RequestHeader set X-Forwarded-Scheme https early
RequestHeader set X-Scheme https early
RequestHeader set X-Forwarded-Proto https early
{% endif %}
{% if header_expect %}
RequestHeader unset Expect early
{% endif %}
{% if keephost %}
ProxyPreserveHost On
{% endif %}
ProxyPass {{ localpath }} {{ proxyurl }}{{remotepath}}
ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}}