HTTPoxy in haproxy

[andrewklau]

Perhaps it would be ideal to add the patch for https://httpoxy.org/ in the default haproxy template?

[pweil-]

@knobunc raising this so it can be triaged down if necessary but blocks by default.

@rajatchopra FYI

[rajatchopra]

Should do it on per route basis using annotations.

[simo5]

@rajatchopra why is it not sufficient to just add it to the config template ?

[knobunc]

I vote for just blocking it. What's the use-case that we would break? There are probably other use cases for dropping headers, I added a bug to take a list of headers to drop in an env. Then we can default it to drop the proxy header.

https://bugzilla.redhat.com/show_bug.cgi?id=1469633

[knobunc]

This is not a release blocker, people can replace the router template today to work around it.

[simo5]

@knobunc ok if I prepare a patch that changes the template to unconditionally block the proxy header in requests ?