Forums Archived

This forum has been archived. No new posts can be made and no new users can sign up. It remains here for reference only.

Find the new forums here

Reverse Proxy - ADS does not fully load

  • 4.7K Views
  • Last Post 22 January 2020
  • Topic Is Solved
Kevin Meatman posted this 22 January 2020

Hello,

I have the problem that my ADS webinterface does not load correctly. There is a proxy reverse set with Apache.

It has worked before, but recently it hasn't worked anymore.

When I open the web interface it only loads so far:

Webinterface

The following error occurs in the log during loading:

[12:23:00] [Auth Activity]        : Authentication token for AMP_SYSTEM requested by UpdateRemoteInstancesList on behalf of INTERNAL

AMPConfig:

#AMP Configuration File
################################
#DO NOT EDIT WHILE AMP IS RUNNING
################################

################################
# Security
################################
Security.ExecPath=Exec
Security.AllowConcurrentSessions=True
Security.LogAuthFailures=False
Security.AuthFailureLogPath=./AuthFailures.log
Security.LogSensitiveProcArgs=False
Security.EncIV=jfjst16QCU6ziB9vzYv8Gw==
Security.EnablePassthruAuth=True
# Security.PassthruAuthLocalOnly - Only allows auth requests that come from 127.0.0.1 - careful when using a controller that is bound to a specific IP rather than 0.0.0.0!
Security.PassthruAuthLocalOnly=False
Security.AuthFailureTimeWindow=5
Security.AuthFailureAttemptsInWindow=5
Security.TwoFactorMode=Optional
Security.AllowAPIDiscoveryWithoutLogin=True
Security.IgnoreAuthServerTLSFailure=True

################################
# Webserver
################################
# Webserver.Port - NEVER CHANGE THIS SETTING MANUALLY! Always use `ampinstmgr rebind` to alter IP/Port bindings. IF YOU CHANGE THIS ON ADS YOU WILL BREAK YOUR LOGINS!
Webserver.Port=8080
# Webserver.IPBinding - NEVER CHANGE THIS SETTING MANUALLY! Always use `ampinstmgr rebind` to alter IP/Port bindings. IF YOU CHANGE THIS ON ADS YOU WILL BREAK YOUR LOGINS!
Webserver.IPBinding=0.0.0.0
Webserver.SessionTimeout=5
Webserver.NoUI=False
Webserver.FilterEndpoints=False
Webserver.AllowedEndpointIPs=["127.0.0.1"]
Webserver.CertificatePath=
Webserver.CertificateSerial=
Webserver.CertificatePassword=
Webserver.EnableWebSockets=True
Webserver.EnablePluginWSStreams=False
Webserver.EnableFetchPostEndpoints=True
Webserver.APIRateLimit=100
Webserver.UsingReverseProxy=False
Webserver.ReverseProxyHost=192.168.0.105

################################
# Login
################################
Login.UseAuthServer=False
# Login.AuthServerURL - The URL for the ADS instance providing authentication when using UseAuthServer
Login.AuthServerURL=
Login.LDAPAllowAuthOnAnyDomain=False
Login.LDAPAuthDomain=

################################
# Branding
################################
Branding.DisplayBranding=False
Branding.CompanyName=Provider name not set
Branding.WelcomeMessage=Welcome Message not set
Branding.URL=https://www.example.com/
Branding.SupportURL=https://www.example.com/support
Branding.LogoURL=
Branding.TwitterUser=cubecoders

################################
# AMP
################################
AMP.InstanceID=509e3885-2dfb-4856-950f-24e262135c58
AMP.InstanceName=ADS01
AMP.FriendlyName=Management Server 1
AMP.AppModule=ADSModule
AMP.LoadPlugins=["FileManager","EmailSender","WebRequestPlugin","LocalFileBackupPlugin"]
AMP.ScheduleOffsetSeconds=0
AMP.AppStartupMode=DoNothing
AMP.FirstStart=True
AMP.ShutdownProperly=True
AMP.Suspended=False
AMP.SuspendReason=
AMP.PreviousVersion=
AMP.DatastoreConnectionString=./datastore.dat
AMP.StoreIPAddressesAsMACAddresses=False
AMP.MapAllPluginStores=True
AMP.IgnoreCTRLC=False

################################
# Monitoring
################################
Monitoring.UseMulticoreCPUCalc=True
Monitoring.IgnoreSMTCores=True
Monitoring.ConsoleScrollback=10
# Monitoring.TitleSuffix - Suffix to append to the terminal title
Monitoring.TitleSuffix=
Monitoring.LogLevel=5
Monitoring.EnableConsoleColoring=True
Monitoring.LogsDirectory=AMPLogs
Monitoring.ProduceStartupScripts=False

################################
# Performance
################################
# Performance.AffinityMask - Specifies which CPU cores AMP child processes are allowed to run on. 0 for all cores.
Performance.AffinityMask=0

################################
# Privacy
################################
Privacy.PrivacySettingsSet=False
Privacy.AutoReportFatalExceptions=True
Privacy.AllowAnalytics=False

I have already tested the following settings:

Webserver.UsingReverseProxy
Security.IgnoreAuthServerTLSFailure
Security.AllowAPIDiscoveryWithoutLogin

CentOS Linux 8 (Core) 19908MB RAM 1x Intel(R) Xeon(R) CPU E5630 @ 2.53GHz(4C/8T)

AMP v1.9.3.0, built 15/01/2020 13:21

Mike posted this 22 January 2020

Screenshot is missing. I'd wager the issue is that the websocket isn't forwarded properly. Apache isn't really supported as a reverse proxy for AMP, we only provide official support when using nginx (which AMP will configure for you)

Close