From 3d12b6c19295d295a62a282d060b309e0c4d99b8 Mon Sep 17 00:00:00 2001 From: Paul Bourke Date: Thu, 25 Aug 2016 10:02:57 +0100 Subject: [PATCH] Set 'balance source' for Horizon in haproxy This ensures that the same client IP address will always reach the same server as long as no server goes down or up. [0] Prevents a situation where during Murano package upload - we end up having zip file on one control node but the import continues on another and ends up failing. [0] http://cbonte.github.io/haproxy-dconv/configuration-1.7.html#4-balance TrivialFix Co-Authored-By: Vladislav Belogrudov Change-Id: I5f90d2757f31e8b24459a585153d5aa7fe6ad90a --- ansible/roles/haproxy/templates/haproxy.cfg.j2 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/ansible/roles/haproxy/templates/haproxy.cfg.j2 b/ansible/roles/haproxy/templates/haproxy.cfg.j2 index d0949ed98d..a4af2cafa4 100644 --- a/ansible/roles/haproxy/templates/haproxy.cfg.j2 +++ b/ansible/roles/haproxy/templates/haproxy.cfg.j2 @@ -187,6 +187,7 @@ listen neutron_server_external {% if enable_horizon | bool %} listen horizon bind {{ kolla_internal_vip_address }}:80 + balance source http-request del-header X-Forwarded-Proto {% for host in groups['horizon'] %} server {{ hostvars[host]['ansible_hostname'] }} {{ hostvars[host]['ansible_' + hostvars[host]['api_interface']]['ipv4']['address'] }}:80 check inter 2000 rise 2 fall 5 @@ -196,6 +197,7 @@ listen horizon {% if kolla_enable_tls_external | bool %} listen horizon_external bind {{ kolla_external_vip_address }}:443 {{ tls_bind_info }} + balance source http-request del-header X-Forwarded-Proto http-request set-header X-Forwarded-Proto https if { ssl_fc } {% for host in groups['horizon'] %}