SYMC: Terminate SSL connection only if VIP protocol is HTTPS and not if VIP port is 443
Bug #1446827 reported by
Varun Lodaya
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenContrail |
Fix Committed
|
Medium
|
Varun Lodaya |
Bug Description
When configuring HTTPS VIP, there are 2 cases:
1) SSL Termination 2) SSL passthrough.
Today, if the VIP is listening on port 443, LBaaS terminates the connection. SSL passthrough case does not work at all. Instead, we should be terminating SSL connection only if protocol is HTTPS. That way user could configure a TCP VIP listening on 443 and terminate SSL on the server directly.
Changed in opencontrail: | |
assignee: | nobody → Varun Lodaya (varun-lodaya) |
Changed in opencontrail: | |
status: | New → Fix Committed |
importance: | Undecided → Medium |
summary: |
- Terminate SSL connection only if VIP protocol is HTTPS and not if VIP - port is 443 + SYMC: Terminate SSL connection only if VIP protocol is HTTPS and not if + VIP port is 443 |
To post a comment you must log in.
Fix committed in master branch: /github. com/Juniper/ contrail- controller/ commit/ 73f4de8cf9000c2 6da7cdd53b06221 ed8734f304 --> Commit /review. opencontrail. org/#/c/ 8193/ --> review
https:/
https:/