octavia/releasenotes/notes/Change-HTTPS-HealthMonitor-functionality-79240ef13e65cd88.yaml
Adam Harwell 897214a4ff SSL Health Monitors didn't actually ... check very much
Change HTTPS monitors to be a real check, and add TLS-HELLO type to
perform the older check functionality if desired.
The only reason you would need TLS-HELLO instead of HTTPS is if your
application does client-cert validation, as the HAProxy box won't have a
valid client cert.

Also add missing PING type to the DB, so PING monitors can be used.

Change-Id: I15a79b7fb0c2ff1020090b4057909a1f41a2c8ad
2017-06-22 00:04:19 +00:00

15 lines
536 B
YAML

---
features:
- |
New Health Monitor type "TLS-HELLO" to perform a simple TLS connection.
upgrade:
- |
If users have configured Health Monitors of type "HTTPS" and are expecting
a simple "TLS-HELLO" check, they will need to recreate their monitor with
the new "TLS-HELLO" type.
fixes:
- |
Health Monitor type "HTTPS" now correctly performs the configured check.
This is done with all certificate validation disabled, so it will not work
if backend members are performing client certificate validation.