Skip to content

Commit 538ec06

Browse files
author
shash
committed
Bump src/code.cloudfoundry.org/gorouter
Bump Shash Reddy: Merge branch 'forwarded-for-proxy-config' of https://github.com/alphagov/paas-gorouter into alphagov-forwarded-for-proxy-config Timothy Mower: Allow forcing X-Forwarded-Proto Header
1 parent 6ac30ce commit 538ec06

File tree

3 files changed

+6
-2
lines changed

3 files changed

+6
-2
lines changed

jobs/gorouter/spec

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -109,6 +109,10 @@ properties:
109109
description: "Enables support for the popular PROXY protocol, allowing downstream load balancers that do not support HTTP to pass along client information."
110110
default: false
111111

112+
router.force_forwarded_proto_https:
113+
description: "Enables setting X-Forwarded-Proto header if SSL termination happened upstream and incorrectly set the header value. When this property is set to true gorouter sets the header X-Forwarded-Proto to https. When this value set to false, gorouter set the header X-Forwarded-Proto to the protocol of the incoming request"
114+
default: false
115+
112116
router.tracing.enable_zipkin:
113117
description: "Enables the addition of the X-B3-Trace-Id header to incoming requests. If the header already exists on the incoming request, it will not be overwritten."
114118
default: false

jobs/gorouter/templates/gorouter.yml.erb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,5 +83,5 @@ token_fetcher_max_retries: 3
8383
token_fetcher_retry_interval: 5s
8484
token_fetcher_expiration_buffer_time: 30
8585
enable_proxy: <%= p("router.enable_proxy") %>
86-
86+
force_forwarded_proto_https: <%= p("router.force_forwarded_proto_https") %>
8787
pid_file: /var/vcap/sys/run/gorouter/gorouter.pid

0 commit comments

Comments
 (0)