You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Nick Couchman <vn...@apache.org> on 2019/09/27 01:36:41 UTC
Re: Guacamole IIS URL Rewrite Chrome FAILS
On Tue, Sep 24, 2019 at 7:25 AM Adrian Owen <ad...@eesm.com> wrote:
> Guacamole is installed on CAMPUS LAN Debian Server.
>
> IIS URL Rewrite, ARR and WebSockets are installed on DMZ 2016 Windows IIS
> Server
>
> CORS is disabled in NGINX and TOMCAT on Guacamole Server.
>
>
>
>
>
> Internet users visit DMZ Web server Guacamole Web Application on exteral
> address, and URL Rewrite forwards traffic to internal CAMPUS Guacamole
> Server.
>
>
>
> Using IE 11. Solution works and internet users can remote access CAMPUS
> computers.
>
> Using Chrome/Firefox – Connection tries and timeouts.
>
>
>
> We cannot see anything in logfiles.
>
>
>
>
>
> Is there a known issue with Chrome and IIS URL Rewrite to Guacamole?
>
I periodically see issues with Chrome accessing IIS URLs in general. Can
Chrome access anything on that IIS web server? Do other pages hosted by
that server work, and only Guacamole fails?
-Nick
>
RE: Guacamole IIS URL Rewrite Chrome FAILS
Posted by Adrian Owen <ad...@eesm.com>.
Hi Nick,
We gave up on IIS Url Rewrite. The error persisted no matter what we tried.
In the end we wrote ASP.NET Core reverse Proxy using ProxyKit.
https://github.com/damianh/ProxyKit
Our custom site supports all browsers. Works perfectly.
Thanks, Adrian
From: Nick Couchman [mailto:vnick@apache.org]
Sent: 27 September 2019 15:13
To: user@guacamole.apache.org
Subject: Re: Guacamole IIS URL Rewrite Chrome FAILS
On Fri, Sep 27, 2019 at 5:57 AM Adrian Owen <ad...@eesm.com>> wrote:
Hi Nick,
“Can Chrome access anything on that IIS web server? Do other pages hosted by that server work, and only Guacamole fails?”
Yes. All other pages work fine, I can go to NGINX landing page, and Guacamole home page. It is only when session starts.
Only IE 11 works. The old Edge browser worked but the new Edge browser built on chromium fails.
I suspect that Websockets is to blame, here - somehow that is not being passed correctly. I've never set that up on IIS, so I don't know what all is required to configure it to pass through correctly, but I suspect that IE11 is falling back to HTTPS and not attempting to use Websockets at all, while the rest of the browsers are attempting to use WSS. To confirm this you could try to disable Websockets pass-through entirely, forcing all browsers to fall back to HTTPS, and see if it works. If it does, then you have an issue with the IIS WSS configuration.
-Nick
RE: Guacamole IIS URL Rewrite Chrome FAILS
Posted by Adrian Owen <ad...@eesm.com>.
Will disable Websockets pass-through and test. Many thanks, Adrian
From: Nick Couchman [mailto:vnick@apache.org]
Sent: 27 September 2019 15:13
To: user@guacamole.apache.org
Subject: Re: Guacamole IIS URL Rewrite Chrome FAILS
On Fri, Sep 27, 2019 at 5:57 AM Adrian Owen <ad...@eesm.com> wrote:
Hi Nick,
“Can Chrome access anything on that IIS web server? Do other pages hosted by that server work, and only Guacamole fails?”
Yes. All other pages work fine, I can go to NGINX landing page, and Guacamole home page. It is only when session starts.
Only IE 11 works. The old Edge browser worked but the new Edge browser built on chromium fails.
I suspect that Websockets is to blame, here - somehow that is not being passed correctly. I've never set that up on IIS, so I don't know what all is required to configure it to pass through correctly, but I suspect that IE11 is falling back to HTTPS and not attempting to use Websockets at all, while the rest of the browsers are attempting to use WSS. To confirm this you could try to disable Websockets pass-through entirely, forcing all browsers to fall back to HTTPS, and see if it works. If it does, then you have an issue with the IIS WSS configuration.
-Nick
Re: Guacamole IIS URL Rewrite Chrome FAILS
Posted by Nick Couchman <vn...@apache.org>.
On Fri, Sep 27, 2019 at 5:57 AM Adrian Owen <ad...@eesm.com> wrote:
> Hi Nick,
>
>
>
> “Can Chrome access anything on that IIS web server? Do other pages hosted
> by that server work, and only Guacamole fails?”
>
>
>
> Yes. All other pages work fine, I can go to NGINX landing page, and
> Guacamole home page. It is only when session starts.
>
>
>
> Only IE 11 works. The old Edge browser worked but the new Edge browser
> built on chromium fails.
>
>
>
I suspect that Websockets is to blame, here - somehow that is not being
passed correctly. I've never set that up on IIS, so I don't know what all
is required to configure it to pass through correctly, but I suspect that
IE11 is falling back to HTTPS and not attempting to use Websockets at all,
while the rest of the browsers are attempting to use WSS. To confirm this
you could try to disable Websockets pass-through entirely, forcing all
browsers to fall back to HTTPS, and see if it works. If it does, then you
have an issue with the IIS WSS configuration.
-Nick
>
RE: Guacamole IIS URL Rewrite Chrome FAILS
Posted by Adrian Owen <ad...@eesm.com>.
Hi Nick,
“Can Chrome access anything on that IIS web server? Do other pages hosted by that server work, and only Guacamole fails?”
Yes. All other pages work fine, I can go to NGINX landing page, and Guacamole home page. It is only when session starts.
Only IE 11 works. The old Edge browser worked but the new Edge browser built on chromium fails.
Adrian
From: Nick Couchman [mailto:vnick@apache.org]
Sent: 27 September 2019 02:37
To: user@guacamole.apache.org
Subject: Re: Guacamole IIS URL Rewrite Chrome FAILS
On Tue, Sep 24, 2019 at 7:25 AM Adrian Owen <ad...@eesm.com>> wrote:
Guacamole is installed on CAMPUS LAN Debian Server.
IIS URL Rewrite, ARR and WebSockets are installed on DMZ 2016 Windows IIS Server
CORS is disabled in NGINX and TOMCAT on Guacamole Server.
Internet users visit DMZ Web server Guacamole Web Application on exteral address, and URL Rewrite forwards traffic to internal CAMPUS Guacamole Server.
Using IE 11. Solution works and internet users can remote access CAMPUS computers.
Using Chrome/Firefox – Connection tries and timeouts.
We cannot see anything in logfiles.
Is there a known issue with Chrome and IIS URL Rewrite to Guacamole?
I periodically see issues with Chrome accessing IIS URLs in general. Can Chrome access anything on that IIS web server? Do other pages hosted by that server work, and only Guacamole fails?
-Nick