search

cloudfoundry / haproxy-boshrelease

A BOSH release for haproxy (based on cf-release's haproxy job)
Apache License 2.0
37 stars 81 forks source link

fix(disable_tcp_accept_proxy): honor flag with non-SSL TCP backends #684

Closed peanball closed 2 months ago

peanball commented 2 months ago

When accept_proxy is set, the accept-proxy setting is set on all backends.

TCP backends can opt out by using the flag disable_tcp_accept_proxy, which defaults to false. This means without configuring explicitly, TCP backends should also have the accept-proxy declaration.

The haproxy.config.erb file did not include the correct value for accept-proxy on non-SSL backends. It now does. The spec test was only checking SSL backends so far. Now it's checking a mix.