octavia/releasenotes/notes
Vlad Gusev ec83c69372 Add support for oslo_middleware http_proxy_to_wsgi
This sets up the HTTPProxyToWSGI middleware in front of Octavia API. The
purpose of this middleware is to set up the request URL correctly in
the case there is a proxy (For instance, a loadbalancer such as HAProxy)
in front of Octavia API.

So, when TLS connections are terminated at the proxy, and one tries to
get the versions from the '/' resource from Octavia API, one will notice
that the protocol is incorrect; It will show 'http' instead of 'https'.
So this middleware handles such cases.

The HTTPProxyToWSGI is off by default and needs to be enabled via a
configuration value.

It can be enabled with the option in octavia.conf:
[oslo_middleware]
enable_proxy_headers_parsing=True

Story: 2005105
Task: 29732
Change-Id: I276188530a83598ed75560f02ed9d80ce9afca2f
2019-07-31 17:10:54 -07:00
..
fix-listener-API-update-with-null Fix listener API handling of None/null updates 2019-04-22 16:24:14 -07:00
.placeholder Add reno for release notes management 2015-12-04 14:42:32 -06:00
3rd-party-neutron-backends-deployment-82691be2bc72a786.yaml devstack: Allow 3rd party neutron backends deployment 2017-08-24 09:25:35 +03:00
add_ability_to_disable_api_versions-253a8dc4253f0f56.yaml Allow operators to disable v1 or v2.0 api endpoints 2017-06-26 14:37:27 -07:00
add_api_audit-58dc16bff517eae7.yaml Add auditing support to the Octavia API 2018-12-11 23:32:58 +00:00
add_API_reference-81d84d0c8598b764.yaml Add v2 Quota API section 2017-06-28 09:32:56 -07:00
add_provider_driver_support-7523f130dd5025af.yaml Implement provider drivers - Cleanup 2018-06-04 19:34:42 -07:00
add_tag_support-4735534f4066b9af.yaml Add a prelude to the Stein release notes 2019-03-09 00:07:06 +00:00
add-ability-setting-barbican-acls-85f36747d4284035.yaml Automatically set Barbican ACLs 2018-07-26 14:05:58 +00:00
add-ability-to-disable-tls-terminated-listeners-965ec7c1a8a9f732.yaml Allow operators to disallow creation of TLS Termination listeners 2017-06-26 18:47:15 -07:00
Add-amphora-agent-config-update-API-298b31e6c0cd715c.yaml Add amphora agent configuration update admin API 2019-02-11 17:30:53 -08:00
add-amphora-flavor-field-54d42da0381ced7f.yaml Add compute_flavor field for amphora api 2018-12-18 19:48:56 +08:00
Add-amphora-info-endpoint-e2e3b53ae5ab5a85.yaml Add admin endpoint for amphora info 2017-09-22 23:39:46 +00:00
add-anti-affinity-policy-config-39df309fd12d443c.yaml Adds a new config for soft-anti-affinity 2017-03-31 14:30:53 -04:00
add-api-tag-filtering-8bfb3c3b7cfd6afe.yaml Update api-ref for tag filtering 2019-01-22 00:55:19 +00:00
add-batch-member-update-capability-4923bd266a9b2b80.yaml Allow PUT to /pools/<id>/members to batch update members 2017-09-20 18:14:53 -07:00
Add-cached_zone-to-the-amphora-record-7c3231c2b5b96574.yaml Add cached_zone to the amphora record 2017-10-31 17:15:45 -07:00
add-compute-flavor-capability-ab202697a7fbdc3d.yaml Add compute flavor support to the amphora driver 2019-01-25 21:02:17 +00:00
add-id-column-to-healthmonitor-a331934ad2cede87.yaml DB migration to add ID column to HM 2017-03-17 17:21:55 +00:00
Add-log-offloading-233cd8612c0dd2b5.yaml Amphora logging 2019-06-14 09:02:26 -07:00
add-monitor-address-and-port-to-member-99fa2ee65e2b04b4.yaml Add monitor address and port to pool member 2017-05-08 04:07:26 -04:00
add-policy-json-support-38929bb1fb581a7a.yaml Add support for policy.json 2017-01-06 23:37:20 +00:00
Add-pool-CA-and-CRL-bb467b17188ed022.yaml Add 2 new fields into Pool API for support re-encryption 2019-02-28 16:20:09 -08:00
Add-pool-tls_enabled-f189677c0e13c447.yaml Add boolean tls_enabled option into Pool 2019-03-01 00:20:38 +00:00
Add-pool-tls-client-auth-01d3b8acfb78ab14.yaml Pool support sni cert for backend re-encryption 2019-02-28 11:36:48 -08:00
add-ptvsd-debugger-33bb632bccf494bb.yaml Add support to the Python Visual Studio Debugger 2019-03-29 11:34:16 +01:00
add-quota-support-fe63a52b6b903789.yaml Add quota support to Octavia 2017-01-13 02:45:14 +00:00
add-rh-flavors-support-for-amphora-agent-cd3e9f9f519b9ff2.yaml Fix the amphora image support for RH Linux flavors 2017-01-31 20:05:07 +02:00
add-rhel-amphora-ab4a7bada2fa3eb7.yaml Add RHEL 8 amphora support 2019-06-07 18:34:29 +02:00
add-shared-pools-and-l7-ef9edf01bb9058e0.yaml Add release notes for L7 and shared pools 2016-02-29 22:48:56 -08:00
add-sos-element-5d6677471341e7f2.yaml Add sos element to Red Hat family images 2018-04-19 15:51:50 +02:00
Add-Stein-Prelude-7d8290b803db8c56.yaml Add a prelude to the Stein release notes 2019-03-09 00:07:06 +00:00
add-systemd-support-5794252f02bce666.yaml Adds support for systemd amphora images 2016-11-16 00:42:37 +00:00
Add-TLS-client-auth-CA-certificate-6863f64a2fe70a6f.yaml Add client_ca_tls_container_ref to listener API 2019-02-24 01:51:35 +00:00
Add-TLS-client-auth-CRL-d0722fd175bc2f51.yaml Add crl-file option for certification 2019-02-24 15:29:59 -08:00
Add-TLS-client-auth-header-insertion-039debc7e6f06474.yaml Add new ssl header into Listener for client certificate 2019-02-24 23:30:59 +00:00
Add-TLS-client-auth-option-15d868d1009fc130.yaml Add an option to the Octavia V2 listener API for client cert 2019-02-24 01:52:20 +00:00
Add-UDP-protocol-support-9c011a23525092a1.yaml Fix UDP release note for CentOS 2018-08-08 13:25:24 -07:00
add-upgrade-check-framework-cc440f3f440ba6d2.yaml Add framework for octavia-status upgrade check 2018-11-12 14:41:14 +05:30
add-x-forwarded-proto-19a1d971cf43b795.yaml Adding support for the octavia listener X-Forwarded-Proto header insertion. 2018-06-19 09:55:36 +02:00
Adds-L7rule-support-for-TLS-client-authentication-22e3ae29aaf7fc26.yaml L7rule support client certificate cases 2019-02-24 23:31:09 +00:00
admin-state-up-fix-4aa278eac67646ae.yaml Fix admin_state_up for loadbalancer and listener 2016-09-12 23:59:40 +00:00
Allow-configuration-of-listener-timeout-values-9a7600c4e21364e3.yaml Expose timeout options 2018-04-04 13:06:01 +09:00
Allow-members-to-be-set-as-backup-e68e46bc52f2fc1f.yaml Allow members to be set as "backup" 2018-04-04 07:47:31 +09:00
allow-operators-to-disable-ping-healthchecks-42fd8c3b88edaf35.yaml Add config for disabling creation of PING type HMs 2018-05-22 14:02:00 +00:00
allow-vip-on-mgmt-net-d6c65d4ccb2a8f2c.yaml Allow to create vip in lb-mgmt-net 2017-03-09 18:33:35 +00:00
amp-az-1a0b4255c77fd1dc.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
Amphora-Failover-API-612090f761936254.yaml Amphora API Failover call 2017-12-21 12:02:27 -08:00
api-create-project-id-4bb984b24d56de2e.yaml Fix Octavia v1 API project_id for POST 2017-02-10 09:57:56 -08:00
auth-strategy-keystone-80b3780a18420b6c.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
auto_detect_haproxy_user_group-c220b6a2c8f1d589.yaml Auto-detect haproxy user_group 2017-04-23 18:24:23 +03:00
bug-1797130-8c9bfa50d9b6c955.yaml Add a prelude to the Stein release notes 2019-03-09 00:07:06 +00:00
build-rate-limiting-a2d2d4c9333a8f46.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
cert-encrypted-ramfs-381ffe3d4a7392d7.yaml Terminated HTTPS certs and keys in encrypted ramfs 2016-09-25 01:42:49 +00:00
Change-HTTPS-HealthMonitor-functionality-79240ef13e65cd88.yaml SSL Health Monitors didn't actually ... check very much 2017-06-22 00:04:19 +00:00
change-keystone-backend-config-d246b1e34015c86c.yaml Backend Keystone authentication 2016-11-17 11:03:40 -06:00
Correct-naming-for-quota-resources-8e4309a839208cd1.yaml Correct naming for quota resources 2018-07-25 21:54:54 -07:00
custom_eventstreamer_queue_url-7a98bd6a7e92e9de.yaml Amend the spelling error of a word 2018-06-06 18:03:02 +08:00
deleted-404-2cdd751e7afbe036.yaml Fix calls to "DELETED" items 2018-04-20 15:50:46 -07:00
deprecate-amp_ssh_key_name-e1041a64ed970a9e.yaml Add flag to disable SSHD on the amphora image 2017-08-16 11:18:10 -07:00
disable_logging-3b50f388ee2b8127.yaml Add a config to surpress amphora logging 2018-07-11 12:07:49 -07:00
documentation-migration-f72c6a1703a105b7.yaml switch documentation job to new PTI 2018-08-24 10:17:37 -07:00
enable-keystone-on-api-b3ebb132ad5ab308.yaml Add keystone authentication of token 2016-11-22 12:57:07 -06:00
enable-mutable-configuration-1d7f62a133148767.yaml Enable oslo_config mutable configurations 2018-07-01 16:45:30 -07:00
encrypt-certs-and-keys-5175d7704d8df3ce.yaml Encrypt certs and keys 2019-02-24 15:41:20 +02:00
extend_api_to_accept_qos_policy_id-128ab592a735f3b8.yaml Extend api to accept qos_policy_id 2017-12-20 09:23:16 +08:00
failover-vip-no-dhcp-50805c5321ebbb05.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
fix_active_standby_ipv6-0317d5cd9e5d50e5.yaml Fix IPv6 in Active/Standby topology 2018-12-06 20:10:38 +00:00
fix-active-standby-in-centos-4e47140e0e139de8.yaml Fix IPv6 in Active/Standby topology on CentOS 2019-04-04 13:23:56 +02:00
Fix-allocate_and_associate-deadlock-3ff1464421c1d464.yaml Fix allocate_and_associate DB deadlock 2019-06-14 09:41:09 -07:00
fix-API-list-performance-3b121deffbc3ce4a.yaml Fix the API list performance regression 2018-09-19 14:02:38 -07:00
fix-creating-fully-populated-load-balancer-ae57ffae5c017ac3.yaml Fix check redirect pool for creating a fully populated load balancer. 2019-02-07 18:17:09 +03:00
fix-driver-errors-81d33948288bf8cf.yaml Fix catching driver exceptions 2019-05-27 05:15:55 +00:00
fix-error-messages-ec817a66249e6666.yaml Improve user error messages for duplicate objects 2017-12-20 17:19:53 -08:00
fix-eth1-ip-flush-7fadda4bdca387b5.yaml Fix the amphora base port coming up 2019-04-05 11:42:47 -07:00
fix-health-check-db-outage-279b0bc1d0039312.yaml Make health checks resilient to DB outages 2018-09-11 12:21:22 -06:00
Fix-HM-DB-Rollback-no-connection-2664c4f7823ecaec.yaml only rollback DB when we have a connection to the DB 2019-06-27 13:06:50 -07:00
fix-housekeeping-db-performance-b0d0fcfcce696314.yaml Fix performance of housekeeping DB clean up 2019-02-19 16:36:02 +01:00
Fix-ifup-on-member-create-5b405d98eb036718.yaml Fix ifup failures on member interfaces with IPv6 2019-03-28 11:45:19 -07:00
fix-invalid-attribute-for-filtering-d2ddb95a1acbded2.yaml Fix invalid query selector with list_ports 2019-04-03 17:20:43 +02:00
fix-IPv6-vip-079a3285f78686ee.yaml Fix VIP address DB storage size to support IPv6 2019-01-28 10:09:59 -08:00
fix-lb-error-failover-2c17afaa20c0c97f.yaml Fix LB failover when in ERROR 2019-02-22 23:59:14 +00:00
fix-multi-amp-down-failover-952618fb8d3d8ae6.yaml Fix failover when multiple amphora have failed 2018-07-22 16:08:45 -07:00
fix-no-resolvconf-rhel-dhclient-hook-36a1c3b1a3b03a3d.yaml Fix dhclient enter hook path on RHEL-based amps 2019-07-09 12:34:16 +02:00
fix-oslo-messaging-connection-leakage-aeb79474105ac116.yaml Fix oslo messaging connection leakage 2019-02-18 15:28:22 -08:00
fix-PING-health-monitor-bc38de57fa759ac0.yaml Fix health monitor type "PING" to use icmp ping 2017-11-29 15:23:28 -08:00
fix-route-table-b2ec0aa7b92d2abc.yaml [amphora-agent] add local net to routing table 1 2018-07-02 14:07:23 -07:00
fix-spare-amphora-check-and-creation-3adf939b45610155.yaml Fix spare amphora check and creation 2019-04-03 14:13:59 -07:00
fix-unlimited-connection-limit-48079688de033c1a.yaml Fixes unlimited listener connection limit 2018-07-19 09:47:31 +02:00
fix-vip-net-no-gw-b46c3ade1a748e69.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
fix-vip-plug-centos-74c2fe7099964b08.yaml Fix VIP plugging on CentOS-based amphorae 2019-04-02 13:59:29 +02:00
fix-vip-qos-policy-extension-enabled-3e16e1c23a7d7ae5.yaml Fix setting of VIP QoS policy 2019-04-03 14:59:58 +02:00
fixed-spare-amphora-rotation-007ba406411a313d.yaml Fix spare amphora failover 2019-04-17 10:46:24 +02:00
force-controlplane-amphora-communication-to-use-tls1.2-1c4adf72d2ce5a82.yaml Force amp-agent communication to TLSv1.2 2019-05-14 14:02:57 -07:00
glance_image_owner-42c92a12f91a62a6.yaml Option to restrict amp glance image owner 2016-09-15 19:46:46 +00:00
glance-tags-for-amphora-images-28bd9df1ed4b9ca3.yaml Fix some typos 2017-08-10 09:29:46 +08:00
haproxy-single-process-b17a3af3a97accea.yaml Fix multi-listener load balancers 2019-07-23 14:28:49 -07:00
IPv6-support-953ef81ed8555fce.yaml Allow IPv6 VIPs 2016-08-11 22:30:00 +00:00
keepalived-race-with-haproxy-e402ef7f466871f6.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
lb_flow_amp_vip-a83db5d84e17a26a.yaml Refactor the pluggin of the VIP 2019-02-11 17:15:10 -08:00
lb-delete-flow-refactor-cfb1bc621bbe92b4.yaml Refactors LB delete flow and removes listener delete 2019-03-14 10:29:26 +00:00
load-balancer-expiry-age-a473f9147552f1b1.yaml Cleanup deleted load balancers in housekeeper's db_cleanup 2016-07-07 03:03:03 +00:00
make-amphora-cert-validity-configurable-7defc508b1174f89.yaml Make amphora cert validity time configurable 2019-04-30 15:30:48 -07:00
moving-api-config-variables-into-new-section-e1c20b77aaf5ea15.yaml Allow operators to disable v1 or v2.0 api endpoints 2017-06-26 14:37:27 -07:00
new-amphora-fields-fa3ffc5801b5e551.yaml Add image_id to amphora table 2018-02-27 14:46:25 +00:00
octavia_v2_RBAC-0eb2b51aa6278435.yaml fix a typo in documentation 2018-03-23 08:26:50 +08:00
octavia-active-standby-cec5d2ad4fd214d8.yaml Adds release notes for Active/Standby 2016-03-07 02:31:18 +00:00
Octavia-flavors-2a96424c3d65c224.yaml Add flavor docs and releae notes 2019-01-25 20:41:03 +00:00
Octavia-lib-transition-driver-agent-aeefef114898b8f5.yaml Updates Octavia to support octavia-lib 2019-03-07 14:40:22 +01:00
octavia-v2-api-c32a62b37c2c8f6f.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
per-amphora-statistics-api-5479605c7f3adb12.yaml Add amphora statistics to the admin API 2018-12-20 22:28:51 -08:00
pike-release-35a1d632ce854d4a.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
provisioning_neutron_db_sync-c019d96a7b64fe20.yaml Option to enable provisioning status sync with neutron db 2017-07-18 12:02:18 +05:30
py3-hmac-digest-81696f6b176e7ae4.yaml Add release note for HMAC python3 fix 2018-07-11 22:45:20 +00:00
remove_user_group_option-56ba749d0064a394.yaml Remove user_group option 2018-08-08 23:45:29 +03:00
remove-bbq-unset-acl-e680020de6a9ad3d.yaml Fix the loss of access to barbican secrets 2019-02-24 10:57:46 -08:00
remove-deprecated-api-configs-3f5652f71610b05e.yaml Remove deprecated API settings 2018-10-18 19:42:21 +00:00
remove-deprecated-v1-resources-6360da3de27b74d3.yaml Remove v1 API and associated code 2019-05-11 14:39:17 -07:00
remove-duplicated-cert_generator-option-83d18647dc1d2954.yaml Fix a typo in the release notes 2017-01-31 16:12:06 -08:00
remove-tenant_id-c0352efbfb3a54f9.yaml project_id should remain in the response for v2 objects 2017-05-03 13:42:53 -07:00
render-disabled-members-to-make-statuses-consistent-69189f71da2e02e8.yaml Create disabled members in haproxy 2018-05-14 10:31:06 -07:00
Report-more-accurate-haproxy-statuses-7e995bb4c7cc0dd6.yaml Properly handle more states from HAProxy health messages 2017-08-01 17:43:40 -07:00
reserved-ips-7ef3a63ab0b6b28a.yaml Allow blocking IPs from member addresses 2018-08-16 22:25:35 +00:00
separate-thread-pool-for-health-stats-update-c263c844075a7721.yaml Fix a release note to call out a fix instead 2018-11-19 16:25:23 +01:00
service-type-73efc939e48d5858.yaml Update release notes for work done in Pike 2017-07-26 19:23:50 -07:00
Set-retry-defaults-to-prod-values-f3cc10d16baa716a.yaml Set the default retries down to 120 2019-02-14 15:38:48 -08:00
statuses_alias-27559e3d74b9eaf0.yaml Add API alias for '/statuses' 2018-04-10 16:41:17 -07:00
stop-logging-amphora-cert-2e188675699d60d5.yaml Stop Logging Amphora Cert 2018-12-13 14:44:06 +00:00
support-http-health-check-with-host-header-e2cf1f2a98d4114f.yaml Support Host header inject for healthmonitor HTTP 1.1 health check 2019-03-06 01:24:31 +00:00
support-networks-without-dhcp-3458a063333ab7a8.yaml Fixes Octavia handling of subnets without DHCP 2016-08-01 15:13:48 +00:00
support-oslo_middleware-http_proxy_to_wsgi-928c6fc5ec3d421c.yaml Add support for oslo_middleware http_proxy_to_wsgi 2019-07-31 17:10:54 -07:00
support-pkcs7-intermediate-ca-bundles-279c12bad974bff7.yaml Add support for PKCS7 bundles and encrypted keys 2016-10-05 19:51:51 -07:00
Support-PKCS12-certificate-objects-1c6e896be9d35977.yaml Switch to using PKCS12 for TLS Term certs 2018-01-23 07:17:14 +00:00
support-proxy-protocol-cc5991175a110619.yaml Add new PROXY protocol to lbaas pool 2017-04-28 23:09:03 +00:00
support-redirect-http-code-1c2e87ef7fda12e97.yaml Support L7policy redirect http code 2019-03-04 15:04:53 -08:00
support-redirect-prefix-7f8b289aee04fe99.yaml Support REDIRECT_PREFIX action for L7Policy 2018-09-28 18:10:39 +07:00
support-remote-debugging-fcb52df4a59c1467.yaml Support remote debugging with PyDev 2018-12-13 20:41:07 +00:00
support-wsgi-deployment-56013fef7172e982.yaml Run Octavia API in a WSGI server 2017-04-30 08:36:44 +00:00
UDP-listener-health-d8fdf64a32e022d4.yaml Update amphora-agent to report UDP listener health 2018-08-31 13:34:57 -07:00
use-dib-distribution-mirror-400d96c1a7df9862.yaml DIB: drop custom mirror elements 2017-07-12 10:57:24 +02:00
Use-Ubuntu-virtual-kernel-for-Amphora-a1e8af8bc7893011.yaml Switch the default Ubuntu kernel to -virtual 2019-07-08 10:30:43 -07:00
vip-port-project-id-bbb26b657b08365e.yaml Adds the user's project id to the VIP port creation 2017-11-29 10:46:13 -08:00
zombie_amp-1b435eb66643dab8.yaml Delete zombie amphorae when detected 2018-10-12 00:00:06 +01:00