diff options
| author | Eric Eastwood <erice@element.io> | 2023-07-18 03:49:21 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-18 09:49:21 +0100 |
| commit | 1c802de626de3293049206cb788af15cbc8ea17f (patch) | |
| tree | 52d72c2fcd6442e96943a7a565c519240eca19eb /tests/http/test_proxyagent.py | |
| parent | Bump anyhow from 1.0.71 to 1.0.72 (#15949) (diff) | |
| download | synapse-1c802de626de3293049206cb788af15cbc8ea17f.tar.xz | |
Re-introduce the outbound federation proxy (#15913)
Allow configuring the set of workers to proxy outbound federation traffic through (`outbound_federation_restricted_to`). This is useful when you have a worker setup with `federation_sender` instances responsible for sending outbound federation requests and want to make sure *all* outbound federation traffic goes through those instances. Before this change, the generic workers would still contact federation themselves for things like profile lookups, backfill, etc. This PR allows you to set more strict access controls/firewall for all workers and only allow the `federation_sender`'s to contact the outside world.
Diffstat (limited to 'tests/http/test_proxyagent.py')
| -rw-r--r-- | tests/http/test_proxyagent.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/tests/http/test_proxyagent.py b/tests/http/test_proxyagent.py index e0ae5a88ff..8164b0b78e 100644 --- a/tests/http/test_proxyagent.py +++ b/tests/http/test_proxyagent.py @@ -33,7 +33,7 @@ from twisted.protocols.tls import TLSMemoryBIOFactory, TLSMemoryBIOProtocol from twisted.web.http import HTTPChannel from synapse.http.client import BlocklistingReactorWrapper -from synapse.http.connectproxyclient import ProxyCredentials +from synapse.http.connectproxyclient import BasicProxyCredentials from synapse.http.proxyagent import ProxyAgent, parse_proxy from tests.http import ( @@ -205,7 +205,7 @@ class ProxyParserTests(TestCase): """ proxy_cred = None if expected_credentials: - proxy_cred = ProxyCredentials(expected_credentials) + proxy_cred = BasicProxyCredentials(expected_credentials) self.assertEqual( ( expected_scheme, |