SYMC: Terminate SSL connection only if VIP protocol is HTTPS and not if VIP port is 443

Bug #1446827 reported by Varun Lodaya
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenContrail
Fix Committed
Medium
Varun Lodaya

Bug Description

When configuring HTTPS VIP, there are 2 cases:
1) SSL Termination 2) SSL passthrough.

Today, if the VIP is listening on port 443, LBaaS terminates the connection. SSL passthrough case does not work at all. Instead, we should be terminating SSL connection only if protocol is HTTPS. That way user could configure a TCP VIP listening on 443 and terminate SSL on the server directly.

Hampapur Ajay (hajay)
Changed in opencontrail:
assignee: nobody → Varun Lodaya (varun-lodaya)
Revision history for this message
Varun Lodaya (varun-lodaya) wrote :
Revision history for this message
Varun Lodaya (varun-lodaya) wrote :
Revision history for this message
Varun Lodaya (varun-lodaya) wrote :
Changed in opencontrail:
status: New → Fix Committed
importance: Undecided → Medium
summary: - Terminate SSL connection only if VIP protocol is HTTPS and not if VIP
- port is 443
+ SYMC: Terminate SSL connection only if VIP protocol is HTTPS and not if
+ VIP port is 443
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.