Reverse Proxy - ADS does not fully load

  • 156 Views
  • Last Post 22 January 2020
  • Topic Is Solved
Kevin Meatman posted this 22 January 2020

Hello,

I have the problem that my ADS webinterface does not load correctly. There is a proxy reverse set with Apache.

It has worked before, but recently it hasn't worked anymore.

When I open the web interface it only loads so far:

Webinterface

The following error occurs in the log during loading:

[12:23:00] [Auth Activity]        : Authentication token for AMP_SYSTEM requested by UpdateRemoteInstancesList on behalf of INTERNAL

AMPConfig:

#AMP Configuration File
################################
#DO NOT EDIT WHILE AMP IS RUNNING
################################

################################
# Security
################################
Security.ExecPath=Exec
Security.AllowConcurrentSessions=True
Security.LogAuthFailures=False
Security.AuthFailureLogPath=./AuthFailures.log
Security.LogSensitiveProcArgs=False
Security.EncIV=jfjst16QCU6ziB9vzYv8Gw==
Security.EnablePassthruAuth=True
# Security.PassthruAuthLocalOnly - Only allows auth requests that come from 127.0.0.1 - careful when using a controller that is bound to a specific IP rather than 0.0.0.0!
Security.PassthruAuthLocalOnly=False
Security.AuthFailureTimeWindow=5
Security.AuthFailureAttemptsInWindow=5
Security.TwoFactorMode=Optional
Security.AllowAPIDiscoveryWithoutLogin=True
Security.IgnoreAuthServerTLSFailure=True

################################
# Webserver
################################
# Webserver.Port - NEVER CHANGE THIS SETTING MANUALLY! Always use `ampinstmgr rebind` to alter IP/Port bindings. IF YOU CHANGE THIS ON ADS YOU WILL BREAK YOUR LOGINS!
Webserver.Port=8080
# Webserver.IPBinding - NEVER CHANGE THIS SETTING MANUALLY! Always use `ampinstmgr rebind` to alter IP/Port bindings. IF YOU CHANGE THIS ON ADS YOU WILL BREAK YOUR LOGINS!
Webserver.IPBinding=0.0.0.0
Webserver.SessionTimeout=5
Webserver.NoUI=False
Webserver.FilterEndpoints=False
Webserver.AllowedEndpointIPs=["127.0.0.1"]
Webserver.CertificatePath=
Webserver.CertificateSerial=
Webserver.CertificatePassword=
Webserver.EnableWebSockets=True
Webserver.EnablePluginWSStreams=False
Webserver.EnableFetchPostEndpoints=True
Webserver.APIRateLimit=100
Webserver.UsingReverseProxy=False
Webserver.ReverseProxyHost=192.168.0.105

################################
# Login
################################
Login.UseAuthServer=False
# Login.AuthServerURL - The URL for the ADS instance providing authentication when using UseAuthServer
Login.AuthServerURL=
Login.LDAPAllowAuthOnAnyDomain=False
Login.LDAPAuthDomain=

################################
# Branding
################################
Branding.DisplayBranding=False
Branding.CompanyName=Provider name not set
Branding.WelcomeMessage=Welcome Message not set
Branding.URL=https://www.example.com/
Branding.SupportURL=https://www.example.com/support
Branding.LogoURL=
Branding.TwitterUser=cubecoders

################################
# AMP
################################
AMP.InstanceID=509e3885-2dfb-4856-950f-24e262135c58
AMP.InstanceName=ADS01
AMP.FriendlyName=Management Server 1
AMP.AppModule=ADSModule
AMP.LoadPlugins=["FileManager","EmailSender","WebRequestPlugin","LocalFileBackupPlugin"]
AMP.ScheduleOffsetSeconds=0
AMP.AppStartupMode=DoNothing
AMP.FirstStart=True
AMP.ShutdownProperly=True
AMP.Suspended=False
AMP.SuspendReason=
AMP.PreviousVersion=
AMP.DatastoreConnectionString=./datastore.dat
AMP.StoreIPAddressesAsMACAddresses=False
AMP.MapAllPluginStores=True
AMP.IgnoreCTRLC=False

################################
# Monitoring
################################
Monitoring.UseMulticoreCPUCalc=True
Monitoring.IgnoreSMTCores=True
Monitoring.ConsoleScrollback=10
# Monitoring.TitleSuffix - Suffix to append to the terminal title
Monitoring.TitleSuffix=
Monitoring.LogLevel=5
Monitoring.EnableConsoleColoring=True
Monitoring.LogsDirectory=AMPLogs
Monitoring.ProduceStartupScripts=False

################################
# Performance
################################
# Performance.AffinityMask - Specifies which CPU cores AMP child processes are allowed to run on. 0 for all cores.
Performance.AffinityMask=0

################################
# Privacy
################################
Privacy.PrivacySettingsSet=False
Privacy.AutoReportFatalExceptions=True
Privacy.AllowAnalytics=False

I have already tested the following settings:

Webserver.UsingReverseProxy
Security.IgnoreAuthServerTLSFailure
Security.AllowAPIDiscoveryWithoutLogin

CentOS Linux 8 (Core) 19908MB RAM 1x Intel(R) Xeon(R) CPU E5630 @ 2.53GHz(4C/8T)

AMP v1.9.3.0, built 15/01/2020 13:21

Mike posted this 22 January 2020

Screenshot is missing. I'd wager the issue is that the websocket isn't forwarded properly. Apache isn't really supported as a reverse proxy for AMP, we only provide official support when using nginx (which AMP will configure for you)

Close