diff options
| author | Paul Bourke <paul.bourke@oracle.com> | 2016-08-25 10:02:57 +0100 |
|---|---|---|
| committer | Paul Bourke <paul.bourke@oracle.com> | 2016-08-25 10:02:57 +0100 |
| commit | 3d12b6c19295d295a62a282d060b309e0c4d99b8 (patch) | |
| tree | 180158962829d04d31bab984e43e8ca7a2fbb756 | |
| parent | b7d1d98668536fc33a0803b7f6abc0f3783484eb (diff) | |
| download | kolla-3d12b6c19295d295a62a282d060b309e0c4d99b8.tar.gz kolla-3d12b6c19295d295a62a282d060b309e0c4d99b8.zip | |
Set 'balance source' for Horizon in haproxy
This ensures that the same client IP address will always reach the same
server as long as no server goes down or up. [0]
Prevents a situation where during Murano package upload - we end up
having zip file on one control node but the import continues on another
and ends up failing.
[0] http://cbonte.github.io/haproxy-dconv/configuration-1.7.html#4-balance
TrivialFix
Co-Authored-By: Vladislav Belogrudov <vladislav.belogrudov@oracle.com>
Change-Id: I5f90d2757f31e8b24459a585153d5aa7fe6ad90a
| -rw-r--r-- | ansible/roles/haproxy/templates/haproxy.cfg.j2 | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ansible/roles/haproxy/templates/haproxy.cfg.j2 b/ansible/roles/haproxy/templates/haproxy.cfg.j2 index d0949ed98..a4af2cafa 100644 --- a/ansible/roles/haproxy/templates/haproxy.cfg.j2 +++ b/ansible/roles/haproxy/templates/haproxy.cfg.j2 @@ -187,6 +187,7 @@ listen neutron_server_external {% if enable_horizon | bool %} listen horizon bind {{ kolla_internal_vip_address }}:80 + balance source http-request del-header X-Forwarded-Proto {% for host in groups['horizon'] %} server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:80 check inter 2000 rise 2 fall 5 @@ -196,6 +197,7 @@ listen horizon {% if kolla_enable_tls_external | bool %} listen horizon_external bind {{ kolla_external_vip_address }}:443 {{ tls_bind_info }} + balance source http-request del-header X-Forwarded-Proto http-request set-header X-Forwarded-Proto https if { ssl_fc } {% for host in groups['horizon'] %} |