Help with skudonet product

[Arthur Ngahane]

Hello,

I have been using Skudonet for a few months now and recently I tried to configure it with an SSL certificate. However, when I try to redirect my HTTPS traffic, the page does not load completely. For example, the CSS of the page seems to be misplaced or not fully loaded.

Thank you for your help.

--

Arthur Ngahane System Administrator e: arthur....@playground.ca w: www.playground.ca

Notice of Confidentiality: The content of this email, together with any attachments, are considered proprietary and confidential information. The information transmitted is intended for the recipient specified in the message only. Unauthorized disclosure or distribution is strictly prohibited. If you received this in error, please contact the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing, or disclosing same.

[Emilio Campos Martín]

Good day, Arthur,

You should be more specific with the configuration of the SSL you have done and with the error you receive.

Are you trying to do SSL offloading? If so did you check if your backend requires some Request Header, x-forwarded-proto: HTTP is used in some cases to announce to the backend that there is a SSL proxy in front of it?

Did you inspect the HTML error with the debugger console of the browser? Here you can see how the request is received by the client. Take into account that the load balancer doesn't modify any value of the HTML body.

Anyway, it could help us to figure out what is going on here if you could extend information about the SSL configuration, the HTTP profile service parameters and the HTML or CSS error.

Regards!

--
Welcome to SKUDONET Community Edition Support, please use this group for sharing information related to SKUDONET only, in other case the message will be deleted.
 
Thanks.
---
You received this message because you are subscribed to the Google Groups "skudonet-ce-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to skudonet-ce-us...@skudonet.com.
To view this discussion on the web visit https://groups.google.com/a/skudonet.com/d/msgid/skudonet-ce-users/CAC9CqGt1QGpwcb5WRqXW0hMzuiNAWmY5Fr30bNdCxgU5P%3D8a3g%40mail.gmail.com.

--

			+34 954 103 502 emilio...@skudonet.com www.skudonet.com Industria 1 (Metropol 1) Floor 4, door 18. 41927 Mairena del Aljarafe Sevilla, Spain

[Arthur Ngahane]

Hi Emilio

Regarding the SSL configuration, I created a Let's Encrypt certificate.

No, I'm not specifically trying to do SSL offloading. I'm just trying to make my proxy accessible from a URL instead of an IP address.

As requested, I am forwarding you information(screenshots) about the SSL configuration, HTTP profile service parameters, and the HTML error.

Thank you in advance for your help.

[Emilio Campos Martín]

HI Arthur, the issue isn't related to the load balancing itself but to the backend,

When you request  https://skudonet.wh.dnsabr.com/ the backend reply you with HTML, this HTML references to the following URLs:

GET	https://skudonet.wh.dnsabr.com/index.bundle.js?9763f2b93bc9b41d689b=

So the client now request this URL that I pasted in the previous comment and the load balancer forward again the request to the backend, the backend replies with a 401 (nginx error), see below:

You should do some troubleshooting and analyze with this URL is created in the HTML and why it doesn't exist in the nginx server.

There is others 501 (file not found in the backend) that is related to the following request forced by the HTML:

GET https://skudonet.wh.dnsabr.com/img/Icon_1024x1024.png

I hope it helps you.

Regards!

[Emilio Campos Martín]

One additional question to my previous email? Are trying to configure a reverse proxy for proxmox admin panel? If so I can try it in the lab as we already use this hypervisor for our tests and template generation for our customers.

Please confirm 

Regards!

[Emilio Campos Martín]

I have tested with enterprise and works, I have to test with the community, I will do the test tomorrow and let you know.

Please verify that the same request works against the backend directly ( same request means same virtual host), this a test should be done before any deeper analysis 

Regards 

El lun, 27 may 2024, 21:47, Arthur Ngahane <arthur....@playground.ca> escribió:

Hi,

Yes, I am indeed trying to configure a reverse proxy for the Proxmox admin panel.

Do you have a solution to the problem I am encountering? Concrete steps to help me resolve the issue.

Thank you.

[Arthur Ngahane]

Hi Emilio,

Is it possible to have a 30-day trial license for skudonet enterprise ? It will allow me to test the software's capabilities within our  network environment.

Thank you for your time and consideration.

Sincerely,

Arthur

[Emilio Campos Martín]

HI Arthur, let me share with you my test lab with community support and proxmox web management interface:

1-Our proxmox server is configured to access in the following way https://lab.skudonet.com/ backend IP 172.16.1.10 with the SSL Certificate signed for CN lab.skudonet.com

2-We have configured an HTTPS profile in our load balancer with Virtual IP 172.16.1.5 with one service name "proxmox", I have enabled SSL backends in the given service and added the backend 172.16.1.10, port 443.

3-I have configured the same SSL certificate in this farm as in the backend for host lab.skudonet.com

3-My local machine resolves lab.skudonet.com to 172.16.1.5 instead of the real backend. I have done this with the /etc/hosts file

4-As soon as I type the following URL in my laptop browser https://lab.skudonet.com/ the Farm HTTPS configured in the load balancer 172.16.1.5:443 receives the traffic and forwards to 172.16.1.10:443  and it works.

So I think that something is wrong with your configuration in the SKUDONET LAOD BALANCER, take into account that the same SSL config done in the backend for proxmox is needed to be done in the Farm in the SKUDONET.

if you want to know more about SSL certificates in the load balancer please refer to the following article:

https://www.skudonet.com/knowledge-base/howtos/create-certificates-pem-format/

If you need any more help, please let us know.

Regards!

[Emilio Campos Martín]

Hi Arthur, did you have the chance to check and test the procedure of my previous email? It seems like your issue is unrelated to SKUDONET EE or CE but with the Proxmox web GUI behaviour, it looks like the web Server offering proxmox web panel checks the requested Host and tries to match against the CN or SNI field in the SSL.

Any feedback will be greatly appreciated.

Regards!

[Emilio Campos Martín]

Any update?

Arthur Ngahane System Administrator e: arthur.ngahane@playground.ca w: www.playground.ca

Notice of Confidentiality: The content of this email, together with any attachments, are considered proprietary and confidential information. The information transmitted is intended for the recipient specified in the message only. Unauthorized disclosure or distribution is strictly prohibited. If you received this in error, please contact the sender immediately by return electronic transmission and then immediately delete this transmission, including all attachments, without copying, distributing, or disclosing same.

--
Welcome to SKUDONET Community Edition Support, please use this group for sharing information related to SKUDONET only, in other case the message will be deleted.
 
Thanks.
---
You received this message because you are subscribed to the Google Groups "skudonet-ce-users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to skudonet-ce-users+unsubscribe@skudonet.com.

To view this discussion on the web visit https://groups.google.com/a/skudonet.com/d/msgid/skudonet-ce-users/CAC9CqGt1QGpwcb5WRqXW0hMzuiNAWmY5Fr30bNdCxgU5P%3D8a3g%40mail.gmail.com.

--

			+34 954 103 502 emilio...@skudonet.com www.skudonet.com Industria 1 (Metropol 1) Floor 4, door 18. 41927 Mairena del Aljarafe Sevilla, Spain

--

Arthur Ngahane System Administrator e: arthur.ngahane@playground.ca w: www.playground.ca