Listen 5000 SSLEngine On SSLCertificateFile /opt/stack/data/devstack-cert.pem SSLProtocol -all +TLSv1.3 +TLSv1.2 # Disable KeepAlive to fix bug #1630664 a.k.a the # ('Connection aborted.', BadStatusLine("''",)) error KeepAlive Off # This increase in allowed request header sizes is required # for swift functional testing to work with tls enabled. It is 2 bytes # larger than the apache default of 8190. LimitRequestFieldSize 8190 RequestHeader set X-Forwarded-Proto "https" # Avoid races (at the cost of performance) to re-use a pooled connection # where the connection is closed (bug 1807518). # Set acquire=1 to disable waiting for connection pool members so that # we can determine when apache is overloaded (returns 503). SetEnv proxy-initial-not-pooled ProxyPass http://158.69.74.91:5001/ retry=0 nocanon acquire=1 ProxyPassReverse http://158.69.74.91:5001/ ErrorLog /var/log/apache2/tls-proxy_error.log ErrorLogFormat "%{cu}t [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] [frontend\ %A] %M% ,\ referer\ %{Referer}i" LogLevel info CustomLog /var/log/apache2/tls-proxy_access.log combined