Skip to content

Conversation

@georgespalding
Copy link
Contributor

@georgespalding georgespalding commented Nov 6, 2024

Problem:

Closes #9597
The httpclient5.4 sends request headers "connection: Upgrade and upgrade: TLS/1.2 by default.
When istio/envoy sees these headers the request is aborted with response: "upgrade_failed"
The httpclient5 can be configured to not do this, but there is no practical way to access that setting from dropwizard plumbing today.

This PR attempts to remedy that issue.

Solution:

Make protocolUpgradeEnabled configurable on the HttpClientConfiguration.

Result:

When protocolUpgradeEnabled is set to false, it will allow the httpclient5 client to successfully interoperate with istio/envoy.

@georgespalding georgespalding requested a review from a team as a code owner November 6, 2024 23:43
@github-actions github-actions bot added this to the 4.0.11 milestone Nov 6, 2024
@georgespalding georgespalding changed the title #9597 - Make ProtocolUpgradeEnabled configurable Make ProtocolUpgradeEnabled configurable Nov 7, 2024
@georgespalding georgespalding force-pushed the add-protocolUpgradeEnabled branch from ba224f9 to afeded6 Compare November 22, 2024 13:41
Copy link
Member

@joschi joschi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@georgespalding Thanks a lot for your contribution! ❤️

@joschi joschi enabled auto-merge (squash) November 25, 2024 19:54
@joschi joschi merged commit 29c9e14 into dropwizard:release/4.0.x Nov 25, 2024
10 of 11 checks passed
@georgespalding georgespalding deleted the add-protocolUpgradeEnabled branch November 25, 2024 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

httpclient5 5.4 Adds tls upgrade headers by default, breaking istio integrations

2 participants