proxies / reverseproxy: consolidate non openshift-iad2 case
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
parent
03fe998142
commit
e2deffab4e
5 changed files with 68 additions and 197 deletions
|
|
@ -0,0 +1,64 @@
|
|||
{% if 'iad2' in inventory_hostname %}
|
||||
{% if rewrite %}
|
||||
RewriteEngine On
|
||||
RewriteRule ^{{remotepath}}$ %{REQUEST_URI}/ [R=301]
|
||||
|
||||
{% endif %}
|
||||
{% if header_scheme %}
|
||||
RequestHeader set X-Forwarded-Scheme https early
|
||||
RequestHeader set X-Scheme https early
|
||||
RequestHeader set X-Forwarded-Proto https early
|
||||
|
||||
{% endif %}
|
||||
{% if header_expect %}
|
||||
RequestHeader unset Expect early
|
||||
|
||||
{% endif %}
|
||||
{% if keephost %}
|
||||
ProxyPreserveHost On
|
||||
{% endif %}
|
||||
|
||||
{% if balancer_name is defined %}
|
||||
SSLProxyEngine On
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}-websocket">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "ws://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "ws://{{ member }}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "wss://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "wss://{{ member }}"
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
|
||||
RewriteEngine on
|
||||
RewriteCond %{HTTP:Upgrade} ^WebSocket$ [NC]
|
||||
RewriteCond %{HTTP:Connection} Upgrade [NC]
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
RewriteCond %{REQUEST_URI} ^{{ remotepath }}/(.)*
|
||||
{% endif %}
|
||||
RewriteRule .* "balancer://{{ balancer_name }}-websocket%{REQUEST_URI}" [P]
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
BalancerMember "http://{{ member }}"
|
||||
{% else %}
|
||||
BalancerMember "https://{{ member }}"
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
ProxyPass {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
ProxyPassReverse {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
Redirect 421 /
|
||||
{% endif %}
|
||||
|
|
@ -4,8 +4,4 @@ ProxyPreserveHost On
|
|||
ProxyTimeout 10800
|
||||
TimeOut 10800
|
||||
|
||||
{% if 'iad2' in inventory_hostname %}
|
||||
{% include "reversepassproxy.conf" %}
|
||||
{% else %}
|
||||
Redirect 421 /
|
||||
{% endif %}
|
||||
{% include "reversepassproxy.conf-nonopenshift-iad2" %}
|
||||
|
|
|
|||
|
|
@ -1,64 +1 @@
|
|||
{% if 'iad2' in inventory_hostname %}
|
||||
{% if rewrite %}
|
||||
RewriteEngine On
|
||||
RewriteRule ^{{remotepath}}$ %{REQUEST_URI}/ [R=301]
|
||||
|
||||
{% endif %}
|
||||
{% if header_scheme %}
|
||||
RequestHeader set X-Forwarded-Scheme https early
|
||||
RequestHeader set X-Scheme https early
|
||||
RequestHeader set X-Forwarded-Proto https early
|
||||
|
||||
{% endif %}
|
||||
{% if header_expect %}
|
||||
RequestHeader unset Expect early
|
||||
|
||||
{% endif %}
|
||||
{% if keephost %}
|
||||
ProxyPreserveHost On
|
||||
{% endif %}
|
||||
|
||||
{% if balancer_name is defined %}
|
||||
SSLProxyEngine On
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}-websocket">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "ws://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "ws://{{ member }}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "wss://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "wss://{{ member }}"
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
|
||||
RewriteEngine on
|
||||
RewriteCond %{HTTP:Upgrade} ^WebSocket$ [NC]
|
||||
RewriteCond %{HTTP:Connection} Upgrade [NC]
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
RewriteCond %{REQUEST_URI} ^{{ remotepath }}/(.)*
|
||||
{% endif %}
|
||||
RewriteRule .* "balancer://{{ balancer_name }}-websocket%{REQUEST_URI}" [P]
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
BalancerMember "http://{{ member }}"
|
||||
{% else %}
|
||||
BalancerMember "https://{{ member }}"
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
ProxyPass {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
ProxyPassReverse {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
Redirect 421 /
|
||||
{% endif %}
|
||||
{% include "reversepassproxy.conf-nonopenshift-iad2" %}
|
||||
|
|
|
|||
|
|
@ -1,64 +1 @@
|
|||
{% if 'iad2' in inventory_hostname %}
|
||||
{% if rewrite %}
|
||||
RewriteEngine On
|
||||
RewriteRule ^{{remotepath}}$ %{REQUEST_URI}/ [R=301]
|
||||
|
||||
{% endif %}
|
||||
{% if header_scheme %}
|
||||
RequestHeader set X-Forwarded-Scheme https early
|
||||
RequestHeader set X-Scheme https early
|
||||
RequestHeader set X-Forwarded-Proto https early
|
||||
|
||||
{% endif %}
|
||||
{% if header_expect %}
|
||||
RequestHeader unset Expect early
|
||||
|
||||
{% endif %}
|
||||
{% if keephost %}
|
||||
ProxyPreserveHost On
|
||||
{% endif %}
|
||||
|
||||
{% if balancer_name is defined %}
|
||||
SSLProxyEngine On
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}-websocket">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "ws://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "ws://{{ member }}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "wss://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "wss://{{ member }}"
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
|
||||
RewriteEngine on
|
||||
RewriteCond %{HTTP:Upgrade} ^WebSocket$ [NC]
|
||||
RewriteCond %{HTTP:Connection} Upgrade [NC]
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
RewriteCond %{REQUEST_URI} ^{{ remotepath }}/(.)*
|
||||
{% endif %}
|
||||
RewriteRule .* "balancer://{{ balancer_name }}-websocket%{REQUEST_URI}" [P]
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
BalancerMember "http://{{ member }}"
|
||||
{% else %}
|
||||
BalancerMember "https://{{ member }}"
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
ProxyPass {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
ProxyPassReverse {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
Redirect 421 /
|
||||
{% endif %}
|
||||
{% include "reversepassproxy.conf-nonopenshift-iad2" %}
|
||||
|
|
|
|||
|
|
@ -1,64 +1 @@
|
|||
{% if 'iad2' in inventory_hostname %}
|
||||
{% if rewrite %}
|
||||
RewriteEngine On
|
||||
RewriteRule ^{{remotepath}}$ %{REQUEST_URI}/ [R=301]
|
||||
|
||||
{% endif %}
|
||||
{% if header_scheme %}
|
||||
RequestHeader set X-Forwarded-Scheme https early
|
||||
RequestHeader set X-Scheme https early
|
||||
RequestHeader set X-Forwarded-Proto https early
|
||||
|
||||
{% endif %}
|
||||
{% if header_expect %}
|
||||
RequestHeader unset Expect early
|
||||
|
||||
{% endif %}
|
||||
{% if keephost %}
|
||||
ProxyPreserveHost On
|
||||
{% endif %}
|
||||
|
||||
{% if balancer_name is defined %}
|
||||
SSLProxyEngine On
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}-websocket">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "ws://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "ws://{{ member }}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
BalancerMember "wss://{{ member }}{{ remotepath }}"
|
||||
{% else %}
|
||||
BalancerMember "wss://{{ member }}"
|
||||
{% endif %}
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
|
||||
RewriteEngine on
|
||||
RewriteCond %{HTTP:Upgrade} ^WebSocket$ [NC]
|
||||
RewriteCond %{HTTP:Connection} Upgrade [NC]
|
||||
{% if remotepath is defined and remotepath != "/" %}
|
||||
RewriteCond %{REQUEST_URI} ^{{ remotepath }}/(.)*
|
||||
{% endif %}
|
||||
RewriteRule .* "balancer://{{ balancer_name }}-websocket%{REQUEST_URI}" [P]
|
||||
|
||||
<Proxy "balancer://{{balancer_name}}">
|
||||
{% for member in balancer_members %}
|
||||
{% if http_not_https_yes_this_is_insecure_and_i_feel_bad %}
|
||||
BalancerMember "http://{{ member }}"
|
||||
{% else %}
|
||||
BalancerMember "https://{{ member }}"
|
||||
{% endif %}
|
||||
{% endfor %}
|
||||
</Proxy>
|
||||
ProxyPass {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
ProxyPassReverse {{ localpath }} "balancer://{{balancer_name}}{{remotepath}}"
|
||||
{% endif %}
|
||||
{% else %}
|
||||
Redirect 421 /
|
||||
{% endif %}
|
||||
{% include "reversepassproxy.conf-nonopenshift-iad2" %}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue