Zenoss 4.2.5 behind NGINX reverse proxy on a different box.

3 posts / 0 new
Last post
Brixo
Brixo's picture
Offline
Last seen: 4 days 20 hours ago
Joined: 12/12/2016 - 06:01
Posts: 4
Zenoss 4.2.5 behind NGINX reverse proxy on a different box.

I have a perfectly working 4.2.5 installation being served on 8080.  I have then installed NGINX on the *same* box listening on port 80, then forwarding to localhost:8080 which also works perfectly.

I have an existing NGINX reverse proxy (dedicated for the role) and would like it to point to the Zenoss 4.2.5 install.

I have an dedicated SSL loadbalancer pointing to the dedicated NGINX reverse proxy is pointing to the IP of the zenoss server, but the redirects of the zport/dnd cause the URL to get mangled and the browser goes haywire!

INTERNET > AWS ELB (with Cert) > NGINX > Zenoss

 

Here is the config on the NGINX:  

 

server {

    listen 80;

    server_name zenoss.synqst.com;

    location / {

        proxy_pass http://10.255.0.10:8080/;

        proxy_http_version 1.1;

        proxy_set_header Host $host;

        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_set_header X-Real-IP $remote_addr;

    }

}

 

Jcurry
Jcurry's picture
Offline
Last seen: 1 day 23 hours ago
Joined: 01/02/2014 - 13:04
Posts: 367
Have you seen this Newsletter

Have you seen this Newsletter item -  http://wiki.zenoss.org/Newsletter:5/Encrypt_All_the_Bits  ?

Cheers,

Jane

Brixo
Brixo's picture
Offline
Last seen: 4 days 20 hours ago
Joined: 12/12/2016 - 06:01
Posts: 4
Hi Jane,

Hi Jane,

Yes, I've seen this.  My use is slightly different.  I am using an AWS Loadbalancer that is doing the SSL offload for me, therefore, I don't have a certificate to actually put on the Zenoss box itself.

I have no problem with any other web service apart from Zenoss.  It seems that it will (very quickly) load the login page using https://myserver.xxxx.com then do a redirect to another link within Zenoss and then removes the https:// to http:// which then breaks all of the session.

It appears that there must be explicit redirects within the Zenoss config...  still scratching heads!!

Thanks, Neil.

Log in to post comments