68 Commits

Author SHA1 Message Date
Gero Posmyk-Leinemann
7a1f01d580 [proxy] Fix meta workspace-handler 2023-02-01 10:20:39 +01:00
Gero Posmyk-Leinemann
c4caa10438 [proxy] Remove dependency on ws-proxy for "Meta" installation 2023-01-31 13:47:38 +01:00
Milan Pavlik
5cc1ab99f5 [proxy] Route /iam/* to public-api-server 2023-01-23 15:31:31 +01:00
Gero Posmyk-Leinemann
78e58ee1c1 [proxy, server] Introduce X-Frontend-Dev-URL 2023-01-19 10:45:27 +01:00
Andrew Farries
503ef163f4 Stop setting X-Real-IP on upstream requests
The value of the header was set to the IP address of a machine inside
GCP rather than the the actual client IP address.

To ensure that the header contains the actual client IP address, this
header is now set at the GCP load balancer.
2023-01-16 21:50:24 +01:00
Huiwen
a1670a1675 Add proxy route for public-api 2023-01-10 13:03:49 +01:00
Anton Kosyakov
697696029b [gp-run] experimental workspace config debug mode
Co-authored-by: Anton Kosyakov <anton@gitpod.io>
Co-authored-by: Victor Nogueira <victor@gitpod.io>
Co-authored-by: Andrea Falzetti <andrea@gitpod.io>
2023-01-09 06:32:48 +01:00
Alex Tugarev
9506a02554 [iam] add proxy route /iam/* 2022-12-22 12:40:31 -03:00
Andrew Farries
fc3fcf3fc1 Extract request matchers to snippet 2022-12-01 11:53:00 -03:00
Andrew Farries
2071284bbd Pre-flight /auth endpoints 2022-12-01 11:43:01 -03:00
Andrew Farries
2d4df42103 Add cors_origin directive to backend_wss 2022-11-30 07:13:59 -03:00
Gero Posmyk-Leinemann
a845eb167e [proxy] Improve reconnection behavior of websockets 2022-11-30 07:13:59 -03:00
Andrew Farries
f89093da40 Match /api/v1 in the @backend_wss matcher
This reverts commit d9ca120e0b0ac59a1ece3e11c13a4d3659ef6c5a.
2022-11-29 13:40:58 -03:00
Andrew Farries
d9ca120e0b Revert "Match /api/v1 in the @backend_wss matcher"
This reverts commit 79e4e3742ec4fc106055ecac4be763f21aafe362.
2022-11-29 12:00:58 -03:00
Andrew Farries
69187b2103 Use forward_auth to pre-flight ws connections
Use the returned `X-Gitpod-Slow-Database` header to direct the ws
connection to either the `slow-server` or `server` deployment.
2022-11-29 11:19:58 -03:00
Andrew Farries
a7d5bb42fb Pre-flight requests to server /api/* endpoints
Before serving /api requests, make a 'pre-flight' request to
`/api/feature-flags/slow-database` and use the `X-Gitpod-Slow-Database`
header in the response to decide where to send the actual request;
either to the regular `server` service or the new `slow-server` service.
2022-11-28 11:47:57 -03:00
Andrew Farries
79e4e3742e Match /api/v1 in the @backend_wss matcher
Websocket Upgrade requests can hit either `/api/gitpod` (from `server`)
or `/api/v1` (from the public API).

This matcher change ensures that the request is handled by the intended
matcher block rather than the block for `api/*` requests below.
2022-11-28 11:21:58 -03:00
Andrew Farries
cd03a462aa Reverse proxy by Sec-WebSocket-Protocol header
Add matchers for the `Sec-WebSocket-Protocol` header and use them in the
`reverse_proxy` directives.
2022-11-21 10:53:51 -03:00
Andrew Farries
f0252299c4 Run caddy fmt 2022-11-21 10:53:51 -03:00
Milan Pavlik
311e9f4512 Revert "[proxy] Remove workspace download plugin"
This reverts commit c74f84bd2942495e9eafa0e57a3e08334e821613.
2022-11-11 11:25:40 +02:00
Milan Pavlik
c74f84bd29 [proxy] Remove workspace download plugin 2022-11-09 13:19:39 +01:00
Manuel Alejandro de Brito Fontes
7c4ddc6196 Update configuration 2022-10-19 20:58:34 +02:00
Milan Pavlik
e8ed0103b0 [proxy] Use AllowedOrigins instead of BaseDomain for CORS 2022-10-13 10:30:28 +02:00
Milan Pavlik
0a476c52e8 [public-api] U Refactor to use connect handlers, route to HTTP server 2022-10-12 12:19:27 +02:00
Milan Pavlik
31f273205f [proxy] Route HTTP 1.x requests to public-api-server 2022-10-05 07:56:20 +02:00
Jean Pierre
350404f82d Add vscode callback route 2022-09-12 20:25:13 +02:00
mustard
cadc7d9552 [proxy] add configcat plugin 2022-09-09 12:25:24 +02:00
Jean Pierre
aa2c51c804 Serve webview resources from blobserve 2022-05-19 08:12:33 +05:30
Milan Pavlik
997c6045fa [public-api] Caddy serves gRPC port instead of http 2022-04-28 12:45:14 +05:30
Milan Pavlik
c1d9ae936f [public-api] Route api.<domain> to public api service & deployment 2022-04-20 22:44:33 +05:30
Gero Posmyk-Leinemann
37feff2c4a [proxy] REplace GITPOD_INSTALLATION_LONGNAME with "<region>.<shortname>" 2022-04-19 20:33:32 +05:30
Anton Kosyakov
a78f4efa61 [server] add vscode(-insiders) ouath2 clients 2022-04-12 13:12:25 +05:30
Jean Pierre
8dd2ddd844 Add new foreign route 2022-03-15 13:12:21 +05:30
Simon Siefke
99dcc8bce5 fix #8738: Interpreting https://self as a hostname, not a keyword. If you intended this to be a keyword, use ‘self’ 2022-03-14 14:05:21 +05:30
mustard
975e54d0b6 Move local companions behind ide proxy 2022-01-29 17:26:21 +01:00
Cornelius A. Ludmann
619c8eafad Add OpenVSX proxy component 2021-10-08 08:19:55 -03:00
Manuel Alejandro de Brito Fontes
e9bc08a97f Fix Caddy prometheus configuration 2021-09-23 09:54:48 -03:00
Manuel Alejandro de Brito Fontes
8a004b8c19 Listen on localhost 2021-09-23 09:54:48 -03:00
Manuel Alejandro de Brito Fontes
3764c7be1f [chart] Enable kube-rbac-proxy for proxy 2021-09-23 04:24:48 -03:00
Cornelius A. Ludmann
dba1afd182 [proxy] Enable Caddy metrics 2021-09-17 17:25:42 -03:00
Gero Posmyk-Leinemann
242cc634ad [proxy] /headless-log-download: actually proxy the download from Gitpod's domain to avoid CORS issues 2021-09-14 14:36:39 +05:30
Cornelius A. Ludmann
b4042875ee [proxy] Replace OpenVSX URL in response body 2021-09-10 13:34:16 +05:30
Cornelius A. Ludmann
c450d62d21 [proxy] Add open-vsx proxy cache 2021-09-10 13:34:16 +05:30
Gero Posmyk-Leinemann
b86bf2a931 [proxy, server] Introduce '/headless-log-download' endpoint for transparent downloags of headless logs 2021-09-06 14:24:12 +02:00
Jan Koehnlein
30c56b8a94 [caddy] reroute legacy URIs
Fixes #5366
2021-08-27 06:20:26 -03:00
Manuel Alejandro de Brito Fontes
ef353942bd [proxy] Simplify conditional log expression 2021-08-24 09:49:23 +02:00
Leonardo Di Donato
599c6ce5ec update(components/proxy/conf): emit request path in access logs
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
44a7ac58c3 update(components/proxy/conf): log IFF status is not 0, 200, and 304
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
44983424e5 update(components/proxy/conf): do not log websocket upgrade requests (status code 0)
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
19cdc4b175 update(components/proxy/conf): stackdriver format for access logs
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00