vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

reverse-proxy: T6370: Documented usage of http-response-headers option

Browse Source
This commit is contained in:
Alex W 2024-05-27 23:07:31 +01:00
parent d9fef261e7
commit 3249752e6d
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
docs/configuration/loadbalancing/reverse-proxy.rst
View File

@ -45,6 +45,11 @@ Service
Set SSL certificate <name> for service <name> Set SSL certificate <name> for service <name>
.. cfgcmd:: set load-balancing reverse-proxy service <name>
http-response-headers <header-name> value <header-value>
Set custom HTTP headers to be included in all responses
Rules Rules
^^^^^ ^^^^^
@ -155,6 +160,11 @@ Backend
Configure requests to the backend server to use SSL encryption without Configure requests to the backend server to use SSL encryption without
validating server certificate validating server certificate
.. cfgcmd:: set load-balancing reverse-proxy backend <name>
http-response-headers <header-name> value <header-value>
Set custom HTTP headers to be included in all responses using the backend
HTTP health check HTTP health check
^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^
@ -291,6 +301,7 @@ HTTPS.
The ``https`` service listens on port 443 with backend ``bk-default`` to The ``https`` service listens on port 443 with backend ``bk-default`` to
handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination. handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination.
HSTS header is set with a 1-year expiry, to tell browsers to always use SSL for site.
Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` Rule 10 matches requests with the exact URL path ``/.well-known/xxx``
and redirects to location ``/certs/``. and redirects to location ``/certs/``.
@ -313,6 +324,7 @@ connection limit of 4000 and a minimum TLS version of 1.3.
set load-balancing reverse-proxy service https mode 'http' set load-balancing reverse-proxy service https mode 'http'
set load-balancing reverse-proxy service https port '443' set load-balancing reverse-proxy service https port '443'
set load-balancing reverse-proxy service https ssl certificate 'cert' set load-balancing reverse-proxy service https ssl certificate 'cert'
set load-balancing reverse-proxy service https http-response-headers Strict-Transport-Security value 'max-age=31536000'
set load-balancing reverse-proxy service https rule 10 url-path exact '/.well-known/xxx' set load-balancing reverse-proxy service https rule 10 url-path exact '/.well-known/xxx'
set load-balancing reverse-proxy service https rule 10 set redirect-location '/certs/' set load-balancing reverse-proxy service https rule 10 set redirect-location '/certs/'