Bug 1044079

Summary: Gears need the ability to modify certain attributes of haproxy.cfg
Product: OpenShift Container Platform Reporter: Keith Robertson <kroberts>
Component: ImageStreamsAssignee: Jason DeTiberus <jdetiber>
Status: CLOSED UPSTREAM QA Contact: libra bugs <libra-bugs>
Severity: high Docs Contact:
Priority: low    
Version: 2.0.0CC: ansilva, bleanhar, bperkins, jkeck, jmoran, jstrong, kroberts, lphiri, sshumake, tiwillia
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-04-07 15:41:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Keith Robertson 2013-12-17 18:39:27 UTC 
Description of problem:
In certain cases, gears need the ability to tune the maximum HTTP header size so that large HTTP headers can pass through to the receiving server (e.g. JBoss).

The specific variable that gears need to be able to control is 'tune.bufsize', and it must be increased from the default so that large objects can be passed through (e.g. x509 certificates) via the  X-Forwarded-SSL-Client-Cert header.

We have determined that 216000 is appropriate for our application, but we cannot say whether or not this value is appropriate for *all* applications.

Version-Release number of selected component (if applicable):
All

How reproducible:
Send a large HTTP header above the HA proxy default.


Actual results:
Connection is dropped.

Expected results:
Header is passed
Comment 4 Brenton Leanhardt 2014-01-08 21:54:41 UTC 
Reaching out to the upstream list to see how we could facilitate this:

http://lists.openshift.redhat.com/openshift-archives/dev/2014-January/msg00015.html
Comment 5 Timothy Williams 2016-04-07 15:41:13 UTC 
Due to the age and complexity of this RFE, as well as our current focus on OpenShift v3 (which already allows for this), I'm closing this RFE.