CMDBuild Forum

Cmdbuild behind load balancer / ssloffload

Systems Engineering
#1

Hello. I put CMDBuilld (v.3) behind a LoadBalancer, but in this particular case it only does SSLOffload. In practice it acts as a reverse proxy. Users connect to the 443 and the loadbalancer connects to cmdbuild on 8080.

It works but I had to do a REWRITE rule to rewrite some http:// to https:// in the response. This was not necessary in 2.5

  1. Is there a way to configure CMDBuild to work behind an ssl-offload reverseproxy without writing rewrite rules?

  2. I still have a problem. I see that there is a connection to a websocket ws: // …
    I have not succeeded in doing the rewrite it to wss:// because I think it is contained in a javascript variable that is built at runtime. How can I work around this?

Perhaps There seems to be no problem even if connections to the websocket do not occur.

Thanks in advance

#2

same problem here, cmdbuild behind a HAproxy, adding headers doesn’t work :frowning:

#3

@Marco I found a solution for that.
You can set the real url for your cmdbuild installation via config parameter

root@cmdb001-betrieb-prod:/data/install/cmdbuild-3.1.1# ./cmdbuild.sh restws -username admin -password xxxxxxx -url http://localhost:8080/cmdbuild  setconfig org.cmdbuild.ui.uiServiceBaseUrl https://cmdb-prod.xxx.xxx/cmdbuild

response was
set config org.cmdbuild.ui.uiServiceBaseUrl =https://cmdb-prod.xxx.xxx/cmdbuild

1 Like