resource_servers[]/servers[]

Specifies the location of the resource server that is being protected. This is an array type and multiple resource servers can be specified.

Properties

NameTypeConstraintsDescription
hoststringThe name or IP address of the server.
portnumberMinimum: 0

Maximum: 65535

Default value: 443
The port on which the server is listening.
virtual_hoststringIf the resource server resides on a virtual host, this parameter can be used to specify the hostname which the reverse proxy should present in the host header for requests to this resource server. If this resource server definition is for a virtual host, this will be inherited from the resource server definition and should not be specified.
sslssl
url_styleurl_style
prioritynumberMinimum: 1

Maximum: 9

Default value: 9
The priority group for this server. The load balancing algorithm in IAG will forward client requests to any currently available server with the highest priority.
uuidstringThe UUID for this server. The UUID of the server is used if this is a stateful resource server to ensure that client requests are always handled by the same server. This field is optional and will be automatically generated if not provided.
The UUID only needs to be manually set when multiple instances of IAG are handling the same stateful traffic. That is, so that each IAG instance is using the same UUIDs for the same servers.

resource_servers[]/servers[]/ssl

SSL settings for the server.

Properties

NameTypeConstraintsDescription
certificateArray of stringIf required, a signer certificate required for the reverse proxy to trust the resource server can be specified here in PEM format.
server_dnstringThis option can be used to ensure that the resource server presents a specific certificate.

resource_servers[]/servers[]/url_style

This entry defines how the resource server URLs are handled.

Properties

NameTypeConstraintsDescription
case_insensitivebooleanValues: true or false

Default value: false
A boolean flag indicating whether or not URLs are case insensitive.
windowsbooleanValues: true or false

Default value: false
A boolean flag indicating whether or not to forbid requests to URLs that appear to be Windows style file name aliases. If this entry is set to true it will also enforce that URLs are case insensitive.

Example

resource_servers:
  - path: "/example"
    # ...
    servers:
      - host: www.test.com
        port: 443
        virtual_host: testportal.test.com
        ssl:
          certificate:
            - "@www-test-com.crt"
          server_dn: cn=test
        url_style:
          case_insensitive: true
          windows: false