Re: [one-users] web UI does not work for zone/vDC if sunstone server is behind a reverse proxy server
Thank you Carlo! It works after those two parameters setting. Gene --- server { listen 12.34.56.78:80; server_name xx.yy.alcatel-lucent.com; underscores_in_headers on; location / { proxy_set_headerHost $host; proxy_pass_request_headers on; proxy_set_header Accept-Encoding ""; proxy_set_headerX-Real-IP $remote_addr; proxy_set_headerX-Forwarded-For $proxy_add_x_forwarded_for; proxy_redirect off; proxy_pass http://localhost:9869; } error_page 404 /404.html; location = /404.html { root /usr/share/nginx/html; } On 14-08-25 09:02 AM, Carlo Daffara wrote: > You should add the two parameters > > underscores_in_headers on; > proxy_pass_request_headers on; > > to your nginx configuration file; so that header requests are passed as-is > (the first one is used to force passing headers that contain an underscore, > as required by Sunstone) > cheers > carlo daffara > > - Messaggio originale - > Da: "Gene Liu" > A: "Daniel Molina" > Cc: users@lists.opennebula.org > Inviato: Lunedì, 25 agosto 2014 15:00:33 > Oggetto: Re: [one-users] web UI does not work for zone/vDC if sunstone server > is behind a reverse proxy server > > Thanks Daniel! > Could you please specify "how"? > > Gene > > On 14-08-25 06:16 AM, Daniel Molina wrote: >> "ZONE_NAME" http header > ___ > Users mailing list > Users@lists.opennebula.org > http://lists.opennebula.org/listinfo.cgi/users-opennebula.org > ___ > Users mailing list > Users@lists.opennebula.org > http://lists.opennebula.org/listinfo.cgi/users-opennebula.org ___ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
Re: [one-users] web UI does not work for zone/vDC if sunstone server is behind a reverse proxy server
"Liu, Gene" writes: > Thanks Daniel! > Could you please specify "how"? Using nginx, I have this in /etc/nginx/site-available/opennebula-sunstone: #+begin_src upstream sunstone { server 127.0.0.1:9869; } server { listen 80 default_server; listen [::]:80 default_server ipv6only=on; root /usr/share/nginx/html; index index.html index.htm; server_name nebula.example.net; access_log /var/log/nginx/opennebula-sunstone-access.log; error_log /var/log/nginx/opennebula-sunstone-error.log; # Pass headers with underscore underscores_in_headers on; # To upload ISO files, increase for VMs images client_max_body_size 1G; location / { include proxy_params; # Forward ZONE_NAME to ONE process proxy_set_header ZONE_NAME $http_zone_name; proxy_pass http://sunstone; } } #+end_src Regards. > > Gene > > On 14-08-25 06:16 AM, Daniel Molina wrote: >> "ZONE_NAME" http header > > ___ > Users mailing list > Users@lists.opennebula.org > http://lists.opennebula.org/listinfo.cgi/users-opennebula.org -- Daniel Dehennin Récupérer ma clef GPG: gpg --recv-keys 0xCC1E9E5B7A6FE2DF Fingerprint: 3E69 014E 5C23 50E8 9ED6 2AAD CC1E 9E5B 7A6F E2DF signature.asc Description: PGP signature ___ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
Re: [one-users] web UI does not work for zone/vDC if sunstone server is behind a reverse proxy server
You should add the two parameters underscores_in_headers on; proxy_pass_request_headers on; to your nginx configuration file; so that header requests are passed as-is (the first one is used to force passing headers that contain an underscore, as required by Sunstone) cheers carlo daffara - Messaggio originale - Da: "Gene Liu" A: "Daniel Molina" Cc: users@lists.opennebula.org Inviato: Lunedì, 25 agosto 2014 15:00:33 Oggetto: Re: [one-users] web UI does not work for zone/vDC if sunstone server is behind a reverse proxy server Thanks Daniel! Could you please specify "how"? Gene On 14-08-25 06:16 AM, Daniel Molina wrote: > "ZONE_NAME" http header ___ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org ___ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
Re: [one-users] web UI does not work for zone/vDC if sunstone server is behind a reverse proxy server
Thanks Daniel! Could you please specify "how"? Gene On 14-08-25 06:16 AM, Daniel Molina wrote: > "ZONE_NAME" http header ___ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
Re: [one-users] web UI does not work for zone/vDC if sunstone server is behind a reverse proxy server
Hi, Sunstone server uses the "ZONE_NAME" http header to define the opennebula endpoint, you have to forward it. Cheers On 21 August 2014 20:54, Liu, Gene wrote: > After I setup a proxy server (ngnix) before sunstone server on master. > From Sunstone UI (192.168.100.10), I can not change zone to "zone1". Other > functions work well from sunstone UI, but changing "zone". > >- > >If I remove the proxy server, and access directly to sunstone server: >192.168.100.10:9869, changing "zone" from sunstone portal works. > >my nginx reverse proxy server setting is as below: >-- >[root@vone_gene ~]# cat /etc/nginx/conf.d/default.conf ># ># The default server ># >server { >listen 192.168.100.10:80; >server_name mycloud.alcatel-lucent.com; > >location / { >proxy_set_header Host $host; >proxy_set_header X-Real-IP $remote_addr; >proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; > >proxy_pass http://localhost:9869; >} > >error_page 404 /404.html; >location = /404.html { >root /usr/share/nginx/html; >} > ># redirect server error pages to the static page /50x.html ># >error_page 500 502 503 504 /50x.html; >location = /50x.html { >root /usr/share/nginx/html; >} >} > >sunstone server settings: >- > > > ># Server Configuration > > > > ># Directory to store temp files when uploading images ># >:tmpdir: /var/tmp > ># OpenNebula sever contact information ># >:one_xmlrpc: http://localhost:2633/RPC2 > ># Server Configuration ># >:host: 127.0.0.1 >:port: 9869 > > > ___ > Users mailing list > Users@lists.opennebula.org > http://lists.opennebula.org/listinfo.cgi/users-opennebula.org > > -- -- Daniel Molina Project Engineer OpenNebula - Flexible Enterprise Cloud Made Simple www.OpenNebula.org | dmol...@opennebula.org | @OpenNebula ___ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
[one-users] web UI does not work for zone/vDC if sunstone server is behind a reverse proxy server
After I setup a proxy server (ngnix) before sunstone server on master. >From Sunstone UI (192.168.100.10), I can not change zone to "zone1". Other functions work well from sunstone UI, but changing "zone". * If I remove the proxy server, and access directly to sunstone server: 192.168.100.10:9869, changing "zone" from sunstone portal works. my nginx reverse proxy server setting is as below: -- [root@vone_gene ~]# cat /etc/nginx/conf.d/default.conf # # The default server # server { listen 192.168.100.10:80; server_name mycloud.alcatel-lucent.com; location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://localhost:9869; } error_page 404 /404.html; location = /404.html { root /usr/share/nginx/html; } # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } } sunstone server settings: - # Server Configuration # Directory to store temp files when uploading images # :tmpdir: /var/tmp # OpenNebula sever contact information # :one_xmlrpc: http://localhost:2633/RPC2 # Server Configuration # :host: 127.0.0.1 :port: 9869 ___ Users mailing list Users@lists.opennebula.org http://lists.opennebula.org/listinfo.cgi/users-opennebula.org