diff options
| author |   Dimitri Savineau <dsavinea@redhat.com> | 2016-03-23 10:14:30 -0400 |
|---|---|---|
| committer | Dimitri Savineau <dsavinea@redhat.com> | 2016-04-15 11:12:19 -0400 |
| commit | 96058c80cb2236d5549c366aa6d2c66d39d86d8b (patch) | |
| tree | ea1d5bb31f91613e5eab676f1c83c82024a3029e /manifests | |
| parent | 25d403306d1b300bb344f7b655de7487bdddce0e (diff) | |
Enable HAProxy forwardfor option for Horizon.
Horizon's backends (httpd) see IP address of the haproxy in the logs instead
of the client address.
Adding forwardfor option allows to add the client address to the
X-Forwarded-For HTTP header and can be replace in the logs by configured the
backend servers with this header.
Change-Id: I54f0f5549d64768dacca71539c71a28cc99d9d95
Diffstat (limited to 'manifests')
| -rw-r--r-- | manifests/loadbalancer.pp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/manifests/loadbalancer.pp b/manifests/loadbalancer.pp index f9d0473..70ccbc1 100644 --- a/manifests/loadbalancer.pp +++ b/manifests/loadbalancer.pp @@ -520,6 +520,7 @@ class tripleo::loadbalancer ( 'rsprep' => '^Location:\ http://(.*) Location:\ https://\1', # NOTE(jaosorior): We always redirect to https for the public_virtual_ip. 'redirect' => "scheme https code 301 if { hdr(host) -i ${public_virtual_ip} } !{ ssl_fc }", + 'option' => 'forwardfor', } } else { $horizon_bind_opts = { @@ -528,6 +529,7 @@ class tripleo::loadbalancer ( } $horizon_options = { 'cookie' => 'SERVERID insert indirect nocache', + 'option' => 'forwardfor', } } |