Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-63852

Apache reverse proxy serving jenkins deployed on tomcat. Reverse proxy broken.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • core
    • Jenkins 2.249.1
      Tomcat 9, org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true
      Apache 2.4

      ajp or http(s) proxy, error happens with both

      Visiting jenkins running on https://www.artop.org/builds/manage, always shows the warning "It appears that your reverse proxy set up is broken." In the configured logger "hudson.diagnosis.ReverseProxySetupMonitor", i get for every single visit two requests shown like bellow. The second one has always the context-path "builds" twice.
      Oct 05, 2020 10:18:44 AM FINE hudson.diagnosis.ReverseProxySetupMonitor doTest
      coming from https://www.artop.org/builds/manage and redirecting to https://www.artop.org/builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/
      Oct 05, 2020 10:18:44 AM FINE hudson.diagnosis.ReverseProxySetupMonitor doTest
      coming from https://www.artop.org/builds/manage and redirecting to https://www.artop.org/builds/builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/

      Tested with ajp

      AllowEncodedSlashes NoDecode
      ProxyRequests Off
      ProxyPass /builds    ajp://localhost:8009/builds nocanon
      

      and http-proxy

      AllowEncodedSlashes NoDecode
      ProxyRequests Off
      ProxyPass /builds    http://localhost:8080/builds nocanon
      ProxyPassReverse     /builds http://localhost:8080/builds
      RequestHeader set X-Forwarded-Proto "https"
      RequestHeader set X-Forwarded-Port "443"
      

      Tomcat log:

      05-Oct-2020 11:13:29.064 FINE [Handling POST /builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/test from 192.68.213.100 : ajp-nio-8009-exec-54] hudson.diagnosis.ReverseProxySetupMonitor.doTest coming from https://www.artop.org/builds/manage and redirecting to https://www.artop.org/builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/
      05-Oct-2020 11:13:29.217 FINE [ajp-nio-8009-exec-43] hudson.diagnosis.ReverseProxySetupMonitor.doTest coming from https://www.artop.org/builds/manage and redirecting to https://www.artop.org/builds/builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/
      192.68.213.100 - - [05/Oct/2020:11:13:29 +0200] "POST /builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/test HTTP/2.0" 302 -
      192.68.213.100 - - [05/Oct/2020:11:13:29 +0200] "POST /builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/test HTTP/2.0" 302 -
      

      Apache log:

      192.68.213.100 - - [05/Oct/2020:11:13:29 +0200] "POST /builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/test HTTP/2.0" 302 150 "https://www.artop.org/builds/manage" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0"
      192.68.213.100 - - [05/Oct/2020:11:13:29 +0200] "GET /builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/ HTTP/2.0" 404 326 "https://www.artop.org/builds/manage" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0"
      192.68.213.100 - - [05/Oct/2020:11:13:29 +0200] "POST /builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/test HTTP/2.0" 302 152 "https://www.artop.org/builds/manage" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0"
      192.68.213.100 - - [05/Oct/2020:11:13:29 +0200] "GET /builds/builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/ HTTP/2.0" 404 304 "https://www.artop.org/builds/manage" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0"
      

      Changing "Jenkins URL" to value "https://www.artop.org/jenkins/"

      Oct 05, 2020 10:58:27 AM FINE hudson.diagnosis.ReverseProxySetupMonitor doTest
      coming from https://www.artop.org/builds/manage and redirecting to https://www.artop.org/jenkins/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/
      Oct 05, 2020 10:58:27 AM FINE hudson.diagnosis.ReverseProxySetupMonitor doTest
      coming from https://www.artop.org/builds/manage and redirecting to https://www.artop.org/jenkins/builds/administrativeMonitor/hudson.diagnosis.ReverseProxySetupMonitor/testForReverseProxySetup/https%3A%2F%2Fwww.artop.org%2Fbuilds%2Fmanage/

       

      When monitoring the logs, while navigating around on the Jenkins instance, i can only get a hit for "builds/builds" or "jenkins/builds", when clicking on https://www.artop.org/builds/manage.

            Unassigned Unassigned
            benbrummer Benjamin Brummer
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: