You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Commit fa79976
Browse filesBrowse the repository at this point in the historyBrowse files
Copy file name to clipboardExpand all lines: docs/howto/openstack/octavia/lbaas-l7pol.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,25 +1,25 @@
1
1
---
2
-
description: How to add automatic HTTP to HTTPS redirection to an HTTPS-terminated load balancer
2
+
description: How to add automatic HTTP-to-HTTPS redirection to an HTTPS-terminated load balancer
3
3
---
4
4
# Using layer 7 redirection
5
5
6
-
Unlike [TCP-based load balancers](lbaas-tcp.md), which may be considered low-level, Layer 7 load balancers follow high-level application logic to redirect client requests to back-end server pools.
6
+
Unlike [TCP-based load balancers](lbaas-tcp.md), which are often considered low-level, Layer 7 load balancers use high-level application logic to redirect client requests to back-end server pools.
7
7
They take their name from the [OSI model](https://en.wikipedia.org/wiki/OSI_model), where Layer 7 is also known as the _Application Layer_.
8
8
A Layer 7, or simply L7, load balancer decides where to redirect incoming packets based on URI, host, HTTP headers, etc.
9
9
10
-
One common application of L7 load balancing is HTTP to HTTPS redirection.
10
+
One common application of L7 load balancing is HTTP-to-HTTPS redirection.
11
11
More specifically, you may have an [HTTPS-terminated load balancer](tls-lb.md) that distributes incoming client traffic to one or more back-end services, and you are looking for a way to automatically turn each HΤTP request into an HTTPS one.
12
12
To have this kind of automatic redirection, you equip your load balancer with a new listener that acknowledges incoming HTTP requests and silently forwards them to the existing HTTPS-based listener.
13
13
14
-
The HTTP listener will apply a specific _L7 policy_ to accomplish this.
14
+
The HTTP listener applies a specific _L7 policy_ to accomplish this.
15
15
In general, an L7 policy is nothing but a set of one or more _L7 rules_, along with a predefined action.
16
-
That action is fallowed when all L7 rules evaluate to `true`, and we should point out that an L7 rule is a logical test that evaluates to either `true` or `false`.
16
+
The action is followed when all L7 rules evaluate to `true` (an L7 rule is a logical test that evaluates to either `true` or `false`).
17
17
18
-
In what follows, we show, step by step, how we add such a listener, policy, and set of rules to an existing HTTPS-terminated load balancer.
18
+
Below, we showhow to add such a listener, policy, and set of rules to an existing HTTPS-terminated load balancer.
19
19
20
20
## Prerequisites
21
21
22
-
The {{gui}} does not support defining L7 policies and rules, so you will have to work with the OpenStack CLI.
22
+
The {{gui}} does not support defining L7 policies and rules, so you will need to use the OpenStack CLI.
23
23
[Enable it](../../getting-started/enable-openstack-cli.md) for the region you will be working in, and make sure you have the Python `octaviaclient` module installed.
24
24
For that, use either the package manager of your operating system or `pip`:
25
25
@@ -38,7 +38,7 @@ For that, use either the package manager of your operating system or `pip`:
38
38
## Assumptions and scenario
39
39
40
40
We assume you already have an [HTTPS-terminated load balancer](tls-lb.md) that forwards client requests to a back-end server pool.
41
-
In our test scenario, the load balancer was accepting HTTPS requests for `whoogle.example.com` and forwarding them to a two-member pool, with servers each running a Docker container for [Whoogle Search](https://github.com/benbusby/whoogle-search).
41
+
In our test scenario, the load balancer accepted HTTPS requests for `whoogle.example.com` and forwarded them to a two-member pool, with each server running a Docker container for [Whoogle Search](https://github.com/benbusby/whoogle-search).
0 commit comments