Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

proxies / reverseproxypass: try and only 421 ocp4 non iad2 proxies

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-06-05 13:44:02 -07:00
parent 42bc4ea41a
commit 80ef5e47df
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/httpd/reverseproxy/templates/reversepassproxy.conf
View file

@ -19,7 +19,7 @@ ProxyPreserveHost On
{% if balancer_name is defined %}
# This is something that wants a apache balancer
{% if 'iad2' in inventory_hostname %}
{% if 'iad2' in inventory_hostname or not ocp4|bool %}
# This proxy is in iad2 and so we setup the balancer.
# Non iad2 proxies just send a 421 for this application to avoid firefox h2 reuse bug
SSLProxyEngine On
@ -73,7 +73,7 @@ BalancerMember "https://{{ member }}"
</Proxy>
ProxyPass {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
ProxyPassReverse {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
{% else %}
{% elif ocp4|bool %}
# This is a non iad2 proxy and an app that only exists in iad2
# We do this to avoid a h2 connection reuse bug by firefox.
Redirect 421 /