72271e9313
FastCGI backend support ( #2982 )
...
Co-authored-by: Pierrick Charron <pierrick@adoy.net>
2019-07-31 10:39:21 -04:00
589c9a20f9
Merge pull request #4278 from moolen/feat/auth-req-cache
...
feat: auth-req caching
2019-07-17 12:06:12 -07:00
23504db770
feat: auth-req caching
...
add a way to configure the `proxy_cache_*` [1] directive for external-auth.
The user-defined cache_key may contain sensitive information
(e.g. Authorization header).
We want to store *only* a hash of that key, not the key itself on disk.
[1] http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key
Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>
2019-07-17 18:39:04 +02:00
fe6c086580
Merge pull request #4288 from eshicks4/proxy-http-version-annotation
...
added proxy-http-version annotation to override the HTTP/1.1 default …
2019-07-11 11:43:07 -07:00
1e07cc6933
Disable access log in stream section for configuration socket
2019-07-10 13:42:13 -04:00
3b0c523e49
added proxy-http-version annotation to override the HTTP/1.1 default connection type to reverse proxy backends
2019-07-08 14:32:00 -04:00
7c297e001a
Merge pull request #4246 from ElvinEfendi/proxy-alternative-upstream-name
...
introduce proxy_alternative_upstream_name Nginx var
2019-07-04 19:20:35 -07:00
8b208cac93
introduce proxy_alternative_upstream_name Nginx var to differentiate canary requests
2019-07-04 19:43:20 -04:00
8807db9748
Check and complete intermediate SSL certificates
2019-07-04 19:13:21 -04:00
27df697dde
introduce ngx.var.balancer_ewma_score
2019-07-03 16:50:22 -04:00
591887089f
Add e2e test suite to detect memory leaks in lua
2019-06-27 22:05:52 -04:00
ddffa2a173
Enable arm again
2019-06-26 23:00:58 -04:00
5dfc7e211f
Merge pull request #4221 from aledbf/upgrade-nginx-image
...
Switch to openresty image
2019-06-24 09:45:57 -07:00
991f95f6bf
Migrate to openresty
2019-06-23 22:29:11 -04:00
d7b213d979
Do not set Host header when backend protocol is grpc
2019-06-18 23:44:10 -04:00
c11583dc5f
Only load modsecurity_module when ModSec is active
2019-06-11 16:39:52 +02:00
c4597522bf
Refactor whitelist from map to standard allow directives
2019-05-27 04:55:38 -04:00
abca32ba8e
reduce memory footprint and cpu usage when modsecurity and owasp rules are enabled globally
2019-05-18 19:08:30 +02:00
8b7f069b56
load modsecurity.conf on ModSecurity.Enable
2019-05-13 17:39:06 +02:00
8cc9afe8ee
Added Global External Authentication settings to configmap parameters incl. addons
2019-05-03 12:08:16 +02:00
34734edc6e
Merge pull request #4005 from Shopify/proxy-next-upstream-timeout
...
Support proxy_next_upstream_timeout
2019-04-15 09:10:09 -07:00
ffeb1fe348
Support proxy_next_upstream_timeout
2019-04-15 11:08:57 -04:00
2f3cf1a6c0
do not create empty access_by_lua_block
2019-04-13 16:11:46 -04:00
8f81538b0d
lua plugin system
2019-04-04 09:25:22 -04:00
496ff07bf1
replace some of the Nginx configuration to Lua code
2019-03-31 12:04:52 -04:00
1bef3e75b2
Set `X-Request-ID` for the `default-backend`, too.
2019-03-22 11:33:11 +01:00
a3c87cf9cb
Properly set ing.Service when there are multiple rules with different hosts using the same path
...
Fixes #3611
Signed-off-by: Alejandro Pedraza <alejandro.pedraza@gmail.com>
2019-03-07 06:06:24 -05:00
8b3702c829
Enable access log for default backend
...
disable log on default_server
2019-02-26 11:14:31 +03:00
3865e30a00
Changes CustomHTTPErrors annotation to use custom default backend
...
Updates e2e test
Removes focus from e2e test
Fixes renamed function
Adds tests for new template funcs
Addresses gofmt
Updates e2e test, fixes custom-default-backend test by creating service
Updates docs
2019-02-24 22:48:56 +01:00
7b2495047f
Merge pull request #3781 from zoumo/proxy-buffer-number
...
feat: configurable proxy buffers number
2019-02-22 12:11:46 -08:00
dc63e5d185
fix: rename proxy-buffer-number to proxy-buffers-number
2019-02-22 10:21:17 +08:00
8b6e4d4697
Use UsePortInRedirects only if enabled
2019-02-21 17:48:45 -03:00
c92d29d462
feat: configurable proxy buffer number
2019-02-20 18:05:09 +08:00
ec04852526
Create custom annotation for satisfy "value"
2019-02-19 15:58:35 -05:00
201718ec0f
Merge pull request #3775 from kppullin/fix-l4-dns-resolve-failures
...
Fix DNS lookup failures in L4 services
2019-02-19 11:11:48 -08:00
f6aded2c51
Fix DNS failures in L4 services
2019-02-17 14:12:10 -08:00
adc128711b
delete confusing CustomErrors attribute to make things more explicit
2019-02-13 22:41:02 -05:00
17e788b8e1
Merge pull request #3684 from aledbf/health
...
Replace Status port using a socket
2019-02-06 13:49:08 -08:00
34b0580225
Replace Status port using a socket
2019-02-06 18:00:10 -03:00
5dee6af957
add params for access log
2019-01-26 21:42:11 +03:00
61bca89d13
Merge pull request #3637 from aledbf/fix-redirect
...
Add support for redirect https to https (from-to-www-redirect)
2019-01-10 19:58:35 -08:00
a3bcbeb3d2
Add support for redirect https to https when from-to-www-redirect is defined
2019-01-10 20:59:49 -03:00
916b6a06d2
Empty access_by_lua_block breaks satisfy any
2019-01-10 10:27:23 -03:00
edd87fbae3
add limit connection status code
...
add default conn status code
add missing colon
add limit connection status code
2019-01-09 19:31:10 +02:00
71cc6df74f
Merge pull request #3174 from Shopify/rewrite-regex
...
Generalize Rewrite Block Creation and Deprecate AddBaseUrl (not backwards compatible)
2019-01-02 12:30:18 -08:00
a73dac2c0b
Fix proxy_host variable configuration
2019-01-02 15:31:27 -03:00
bf7b5ebd81
Add an option to automatically set worker_connections based on worker_rlimit_nofile
2018-12-27 18:36:19 +01:00
382049a0bf
Adds support for HTTP2 Push Preload annotation
...
update test for backendprotocols
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Signed-off-by: Ricardo Pchevuzinske Katz <ricardo.katz@serpro.gov.br>
Adds support for HTTP2 Push Preload annotation
Adds support for HTTP2 Push Preload annotation
2018-12-24 17:13:25 -02:00
4896b064ca
lua randomseed per worker
2018-12-20 17:09:29 +04:00
67654a6fd5
Generalize Rewrite Block Creation
2018-12-13 13:02:05 -05:00
Charle Demers
Kubernetes Prow Robot
Moritz Johner
Manuel Alejandro de Brito Fontes
E. Stuart Hicks
Elvin Efendi
Sebastiaan Tammer
weltschraet
MRoci
okryvoshapka-connyun
Alex Kursell
Gregor Noczinski
Alejandro Pedraza
Mikhail Marchenko
jasongwartz
Jim Zhang
Anthony Ho
Kevin Pullin
Rustam Zagirov
Shai Katz
ramnes
Anish Ramasekar
Zenara Daley