<p><img src="https://mail.dgist.ac.kr:443/mail/dsn/LToeU+zVLQTtl7X6a7vqnC6ZrFmmOdzFtkhMLxUoaQ69R6xsvuifscm0LNN-6JsnqWadEkfbS2MGkLe48PMiw5zCcFmg" border="0"></p>
<div style="font-family: none; font-size: 11pt;">
<p>Hello</p><p><br></p><p>Thanks for the kind reply</p><p>However I've already set websocket related options in NGINX, seems like this is not the case</p><p>I also tried to access spice proxy directly, without NGINX reverse proxying in between</p><p><br></p><p><br></p><p>1) When "html5proxy_base_url = http://my-domain-name:6082/spice_auto.html"</p><p><br></p><p>- http://my-domain-name:6082/spice_auto.html?token=TOKEN (Accessing spice proxy through NGINX) works</p><p>- http://192.168.10.1:6082/spice_auto.html?token=TOKEN (Accessing spice proxy on controller node directly) works</p><p><br></p><p>But horizon dashboard page(https://) won't embed spice_auto.html because its link starts with http://</p><p><br></p><p><br></p><p><br></p><p>2) When <span style="font-size: 14.6667px;">"</span><span style="font-size: 14.6667px;">html5proxy_base_url = </span><span style="font-size: 14.6667px;">https://my-domain-name:6082/spice_auto.html"</span></p><p><br></p><p><span style="font-size: 14.6667px;">- https://my-domain-name:6082/spice_auto.html?token=TOKEN (Accessing spice proxy through NGINX) does not work</span><br></p><p style="margin-left: 2em;"><span style="font-size: 11pt;">spice_auto.html page loads, but browser js console shows: ERROR: Error: Unexpected protocol mismatch.</span><br></p><p style="margin-left: 2em;"><br></p><p><span style="font-size: 14.6667px;">- http://192.168.10.1</span><span style="font-size: 14.6667px;">:6082/spice_auto.html?token=TOKEN (Accessing spice proxy on controller node directly) does not work</span><br></p><p style="margin-left: 2em;"><span style="font-size: 14.6667px;">spice_auto.html page loads, but browser js console shows: </span><span style="font-size: 14.6667px;">ERROR: Error: Unexpected protocol mismatch.</span><br></p><p style="margin-left: 2em;"><span style="font-size: 14.6667px;"><br></span></p><p><br></p><p><br></p><p>I still get "ERROR: Error: Unexpected protocol mismatch." message in browser console, even when accessing spice proxy directly</p><p>Thats why I believe spice proxy on controller node works differently based on whether "html5proxy_base_url" starts with http:// or https://</p><p><br></p><p>Any suggestions will be appreciated!</p><p>Thanks</p><p><br></p>
<p><br></p>
<p>
</p><blockquote style="padding-left: 5px; border-left-color: black; border-left-width: 2px; border-left-style: solid;"><p>
---------- <b>Original Message</b> ----------<br><b>From</b>: "Radosław Piliszek" <radoslaw.piliszek@gmail.com><br><b>To</b>: park0kyung0won@dgist.ac.kr<br><b>cc</b>: "Openstack Discuss List" <openstack-discuss@lists.openstack.org><br><b>Date</b>: 2022-09-13 (화) 18:15:06<br><b>Title</b>: Re: [openstack yova][nova-spiceproxy] Spice proxy behind SSL
termination: protocol mismatch error in horizon web UI<br>
</p><p><br></p>
<div><div>Hi!</div><div><br></div><div>This is because you need to proxy the websocket protocol. You may want to read up on it in [1] and [2].</div><div>[2] being the reference point and [1] being an introductory blog post with a simple app example to try out if your config is all right.</div><div><br></div><div>[1] <a href="https://www.nginx.com/blog/websocket-nginx/" rel="noopener noreferrer" target="_blank">https://www.nginx.com/blog/websocket-nginx/</a><br></div><div>[2] <a href="http://nginx.org/en/docs/http/websocket.html" rel="noopener noreferrer" target="_blank">http://nginx.org/en/docs/http/websocket.html</a></div><div><br></div><div>Kind regards,</div><div>Radek</div><div>-yoctozepto</div><br><div class="gmail_quote"><div class="gmail_attr">On Tue, 13 Sept 2022 at 11:11, <<a href="mailto:park0kyung0won@dgist.ac.kr" rel="noopener noreferrer" target="_blank">park0kyung0won@dgist.ac.kr</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin: 0.0px 0.0px 0.0px 0.8ex;border-left: 1.0px solid rgb(204,204,204);padding-left: 1.0ex;"><p><img border="0"></p> <div style="font-family: none;font-size: 11.0pt;"><p>Hello</p><p><br></p><p>I'm trying to deploy openstack services behind the NGINX reverse proxy</p><p>NGINX is in charge of SSL termination, and communicates with openstack services unencrypted</p><p><br></p><p>When I set "html5proxy_base_url" option in [spice] section of nova.conf file to "<a href="http://my-domain-name:6082/spice_auto.html" rel="noopener noreferrer" target="_blank">http://my-domain-name:6082/spice_auto.html</a>", </p><p>spice console in web UI works(by manually typing <a href="http://my-domain-name:6082/spice_auto.html" rel="noopener noreferrer" target="_blank">http://my-domain-name:6082/spice_auto.html</a> in browser address tab), but <span style="font-size: 11.0pt;">chrome refuses to load spice console because its http</span></p><p><br></p><p>If I change html5proxy_base_url to "<a href="https://my-domain-name:6082/spice_auto.html" rel="noopener noreferrer" target="_blank">https://my-domain-name:6082/spice_auto.html</a>",</p><p>spice console page(spice_auto.html) loads in chrome, but console itself is blank</p><p>And I get following errors from chrome developer tools console:</p><p><br></p><p>>> disconnect spice_auto.html?toke…8-3a537f56f5b0):144<br></p><p><< disconnect spice_auto.html?toke…8-3a537f56f5b0):157 <br></p><p>ERROR: Error: Unexpected protocol mismatch.<br></p><p><br></p><p>Seems like spice-html5 uses different protocol based on "html5proxy_base_url" option in /etc/nova/nova.conf (whether its https:// or http://)</p><p>How can I deploy nova-spiceproxy behind the NGINX reverse proxy, while NGINX is acting as SSL termination point?</p><p><br></p><p>Thanks</p></div> </blockquote></div></div>
</blockquote>
<p></p>
</div>