Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-10611

CLI doesn't work if the firewall is activated on the server

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Component/s: cli
    • Labels:
      None
    • Similar Issues:

      Description

      Hi,

      I'm using Jenkins 1.425-SNAPSHOT deployed like this :

      • OS : Ubuntu 11.04
      • AppServer : Apache Tomcat 6.0.32
      • Reverse Proxy : Apache HTTPd with mod-proxy-httpd
        Jenkins is exposed only using https on the apache side.
        The reverse proxy has this sort of config :
            ProxyRequests           Off
            ProxyPreserveHost       On
            ProxyPass               /       http://localhost:20020/ acquire=1000 retry=30
            ProxyPassReverse        /       http://localhost:20020/
            <Proxy *>
                Order deny,allow
                Allow from all
            </Proxy>
        

        I cannot use the Jenkins CLI if the firewall is activated and I receive a Connection Timeout Error.
        Jenkins probably opens a communication port (JNPL ?) that the CLI cannot use.

        Attachments

          Activity

          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          cli/src/main/java/hudson/cli/CLI.java
          http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0
          Log:
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't
          work.

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html cli/src/main/java/hudson/cli/CLI.java http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0 Log: [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't work.
          Hide
          dogfood dogfood added a comment -

          Integrated in jenkins_main_trunk #1036
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't

          Kohsuke Kawaguchi : 5f756c61706911f8db10897956657c7a2e50eda0
          Files :

          • cli/src/main/java/hudson/cli/CLI.java
          • changelog.html
          Show
          dogfood dogfood added a comment - Integrated in jenkins_main_trunk #1036 [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't Kohsuke Kawaguchi : 5f756c61706911f8db10897956657c7a2e50eda0 Files : cli/src/main/java/hudson/cli/CLI.java changelog.html
          Hide
          pjos Pawel Josefsson added a comment -

          I didn't got this working with Jenkins 1.427,
          the root problem seems to be related to Apache Proxy and Jenkins way of using http protocol for its fullDuplex implementation.

          https://issues.apache.org/bugzilla/show_bug.cgi?id=40029
          It seems that proxy expects the Content-Length to be correct but it will never get the expected amount of bytes.

          Basically, Apache proxy won't allow CLI to communicate with Master.

          Show
          pjos Pawel Josefsson added a comment - I didn't got this working with Jenkins 1.427, the root problem seems to be related to Apache Proxy and Jenkins way of using http protocol for its fullDuplex implementation. https://issues.apache.org/bugzilla/show_bug.cgi?id=40029 It seems that proxy expects the Content-Length to be correct but it will never get the expected amount of bytes. Basically, Apache proxy won't allow CLI to communicate with Master.
          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          cli/src/main/java/hudson/cli/CLI.java
          http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0
          Log:
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't
          work.

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html cli/src/main/java/hudson/cli/CLI.java http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0 Log: [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't work.
          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          cli/src/main/java/hudson/cli/CLI.java
          http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0
          Log:
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't
          work.

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html cli/src/main/java/hudson/cli/CLI.java http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0 Log: [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't work.

            People

            • Assignee:
              kohsuke Kohsuke Kawaguchi
              Reporter:
              aheritier Arnaud Héritier
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: