diff options
| author |   Dan Trainor <dan.trainor@gmail.com> | 2017-03-30 20:36:04 -0400 |
|---|---|---|
| committer | Dan Trainor <dan.trainor@gmail.com> | 2017-03-30 23:25:46 -0400 |
| commit | e8125cb3640e0fe74b8617aaf55686d5645c8f7f (patch) | |
| tree | 8b59700cee6fd1b9e8202a7b55a7c4375bc447d4 /manifests | |
| parent | 1d31e6e4bfd5896758429ad793375f40ca8ff84e (diff) | |
Add tunnel timeout for ui proxy container
Add an explicit tunnel timeout configuration option to increase the
tunnel timeout for persistent socket connections from two minutes (2m)
to one hour (3600s). A configuration was already present to apply a
tunnel timeout to the zaqar_ws endpoint, but that only applies to
connections made directly to the zaqar_ws endpoint directly. Since UI
now uses mod_proxy to proxy WebSocket connections for Zaqar, the timeout
is now applied for the same reasons to the ui haproxy server.
Change-Id: If749dc9148ccf8f2fa12b56b6ed6740f42e65aeb
Closes-Bug: 1672826
Diffstat (limited to 'manifests')
| -rw-r--r-- | manifests/haproxy.pp | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/manifests/haproxy.pp b/manifests/haproxy.pp index 92edd71..ca83407 100644 --- a/manifests/haproxy.pp +++ b/manifests/haproxy.pp @@ -1595,6 +1595,12 @@ class tripleo::haproxy ( server_names => $controller_hosts_names_real, mode => 'http', public_ssl_port => $ports[ui_ssl_port], + listen_options => { + # NOTE(dtrainor): in addition to the zaqar_ws endpoint, the HTTPS + # (443/tcp) endpoint that answers for the UI must also use a long-lived + # tunnel timeout for the same reasons mentioned above. + 'timeout' => ['tunnel 3600s'], + }, } } if $contrail_config { |