o Add support to expose/redirect/disable insecure schemes (http) for
edge secured routes.
o Add changes to template, haproxy and f5 router implementations.
o Add generated* files.
@@ -94,11 +94,19 @@ type TLSConfig struct {
// DestinationCACertificate provides the contents of the ca certificate of the final destination. When using reencrypt
// termination this file should be provided in order to have routers use it for health checks on the secure connection
DestinationCACertificate string `json:"destinationCACertificate,omitempty" description:"provides the contents of the ca certificate of the final destination. When using re-encrypt termination this file should be provided in order to have routers use it for health checks on the secure connection"`
+
+ // Insecure indicates the desired behavior for insecure connections
+ // to an edge-terminated route: expose, redirect or disable.
+ Insecure TLSInsecureType `json:"insecure,omitempty" description:"indicates desired behavior for insecure connections to an edge-terminated route. If not set, insecure connections will not be allowed"`
}
// TLSTerminationType dictates where the secure communication will stop
type TLSTerminationType string
+// TLSInsecureType dictates the behavior of insecure connections to an
+// edge-terminated route.
+type TLSInsecureType string
+
const (
// TLSTerminationEdge terminate encryption at the edge router.
TLSTerminationEdge TLSTerminationType = "edge"
@@ -106,4 +114,11 @@ const (
TLSTerminationPassthrough TLSTerminationType = "passthrough"
// TLSTerminationReencrypt terminate encryption at the edge router and re-encrypt it with a new certificate supplied by the destination
TLSTerminationReencrypt TLSTerminationType = "reencrypt"
+
+ // TLSInsecureDisable disables insecure connections for an edge-terminated route.
+ TLSInsecureDisable TLSInsecureType = "disable"
+ // TLSInsecureExpose allows insecure connections for an edge-terminated route.
+ TLSInsecureExpose TLSInsecureType = "expose"
+ // TLSInsecureRedirect redirects insecure connections for an edge-terminated route.
+ TLSInsecureRedirect TLSInsecureType = "redirect"
)
