We installed Confluence behind an Apache configured as Reverse Proxy.

      <VirtualHost *:443>
        ServerAdmin webmaster@testconfluence.bitvoodoo.ch
        ServerName testconfluence.bitvoodoo.ch
        ServerAlias www.testconfluence.bitvoodoo.ch
        ServerAlias testconfluence.bitvoodoo.ch.bitvoodoo14.nine.ch
      
        # Do not index Testdomain
        SetEnvIf Host "testconfluence.bitvoodoo.ch.bitvoodoo14.nine.ch" TEST_URL
        Header set X-Robots-Tag "noindex, nofollow" env=TEST_URL
      
        DocumentRoot /home/www-data/testconfluence.bitvoodoo.ch
      
        ErrorLog /home/www-data/logs/testconfluence.bitvoodoo.ch.error.log
        CustomLog /home/www-data/logs/testconfluence.bitvoodoo.ch.access.log combined
      
        UseCanonicalName off
      
        # SSL
        SSLEngine on
        SSLCertificateFile /etc/ssl/letsencrypt/certs/testconfluence.bitvoodoo.ch/cert.pem
        SSLCertificateChainFile /etc/ssl/letsencrypt/certs/testconfluence.bitvoodoo.ch/chain.pem
        SSLCertificateKeyFile /etc/ssl/letsencrypt/private/testconfluence.bitvoodoo.ch/priv.pem
      
        Alias /nine-ssl-check "/var/www"
      
        # Directives
        # Jira Proxy
        ProxyRequests Off
        ProxyPreserveHost On
        
        <Proxy *>
          Order deny,allow
          Allow from all
        </Proxy>
        
        ProxyPass /nine-ssl-check/ !
        ProxyPass /.well-known/ !
        ProxyPass / http://localhost:8090/
        ProxyPassReverse / http://localhost:8090/
        # AWStats
        Alias /awstats-icon "/usr/share/awstats/icon/"
        Alias /stats "/usr/lib/cgi-bin/awstats.pl"
        <Location /stats>
          Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
          AddHandler cgi-script .pl
          Order allow,deny
          Allow from all
      
          SetEnv AWSTATS_FORCE_CONFIG testconfluence.bitvoodoo.ch
      
          AuthName "Stats"
          AuthType Basic
          AuthUserFile /home/www-data/.htpasswd
          require user nine stats stats_www-data stats_testconfluence.bitvoodoo.ch
        </Location>
      </VirtualHost>
      

      If I request the editor, some synchrony resource can't be loaded and the editor can't be loaded.

      I thought with the new milestone Reverse Proxy is supported?

        1. Confluence_support_2016-09-15-11-51-36.zip
          108 kB
        2. screenshot-1.png
          screenshot-1.png
          48 kB
        3. screenshot-2.png
          screenshot-2.png
          155 kB
        4. screenshot-3.png
          screenshot-3.png
          188 kB
        5. screenshot-4.png
          screenshot-4.png
          33 kB
        6. synchrony error.png
          synchrony error.png
          292 kB
        7. testconfluence.bitvoodoo.ch.har
          5.65 MB

          Form Name

            [CONFSERVER-43758] Reverse Proxy Issue - Synchrony doesn't work

            Thanks oliver.straesser@getunik.com, I have raised https://jira.atlassian.com/browse/CONF-43777 to track the 404 issue you reported. Thanks for the feedback on our documentation I will see if we can do some updates to make it clearer how to make the changes.

            I'll resolve this ticket now and make further notes about the non base url configuration on the new ticket you created https://jira.atlassian.com/browse/CONF-43770.

            Thanks again!

            Brendan McNamara (Inactive) added a comment - Thanks oliver.straesser@getunik.com , I have raised https://jira.atlassian.com/browse/CONF-43777 to track the 404 issue you reported. Thanks for the feedback on our documentation I will see if we can do some updates to make it clearer how to make the changes. I'll resolve this ticket now and make further notes about the non base url configuration on the new ticket you created https://jira.atlassian.com/browse/CONF-43770 . Thanks again!

            Ok I don't get it work with our common ways, so I opened the new ticket CONF-43770. It surprised me, why you removed the documentation for this part in the EAP documentation of the apache.

            Oliver Straesser added a comment - Ok I don't get it work with our common ways, so I opened the new ticket CONF-43770 . It surprised me, why you removed the documentation for this part in the EAP documentation of the apache.

            I detected a new issue, but I will create a new ticket - It seems that I'm not able to configure Confluence to run with out a context path -> I retrieve every time a redirect to /confluence .... independent what I've configured in the server.xml. Is there something known?

            If no, I will create a new ticket - because it's synchrony independent.

            Oliver Straesser added a comment - I detected a new issue, but I will create a new ticket - It seems that I'm not able to configure Confluence to run with out a context path -> I retrieve every time a redirect to /confluence .... independent what I've configured in the server.xml. Is there something known? If no, I will create a new ticket - because it's synchrony independent.

            Yes you are right This module was missing

            The only error now is, that this is throwing (But all seems to work):

            Thank you for your help and your investigations!
            Maybe it make sense to create a note on the Upgrade Documentation, that this module and the new apache configuration is needed - because not all people scanning a page for changes in the documentation

            Thank you and greetings to the rest of your team!

            Oliver Straesser added a comment - Yes you are right This module was missing The only error now is, that this is throwing (But all seems to work): Thank you for your help and your investigations! Maybe it make sense to create a note on the Upgrade Documentation, that this module and the new apache configuration is needed - because not all people scanning a page for changes in the documentation Thank you and greetings to the rest of your team!

            Hi oliver.straesser@getunik.com,

            Can you please check that you have the following apache modules enabled:

            LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
            LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
            LoadModule proxy_wstunnel_module /usr/lib/apache2/modules/mod_proxy_wstunnel.so
            LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so
            

            I was able to get the apache reverse proxy working in my dev environment with SSL using a very similar configuration to the one you provided. I was then able to simulate the same console errors you saw by disabling proxy_wstunnel_module. Can you please verify you have the required modules enabled?

            Brendan McNamara (Inactive) added a comment - Hi oliver.straesser@getunik.com , Can you please check that you have the following apache modules enabled: LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so LoadModule proxy_wstunnel_module /usr/lib/apache2/modules/mod_proxy_wstunnel.so LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so I was able to get the apache reverse proxy working in my dev environment with SSL using a very similar configuration to the one you provided. I was then able to simulate the same console errors you saw by disabling proxy_wstunnel_module. Can you please verify you have the required modules enabled?

            Ok thank you.

            I hope we find the solution before you release 6.0.0, because we have a lot of installations out there - configured in this way. (The other way is IIS & ARR - which we will test next - I expect issues there too )

            Thank you for being on this issue and helping to solve it.

            Oliver Straesser added a comment - Ok thank you. I hope we find the solution before you release 6.0.0, because we have a lot of installations out there - configured in this way. (The other way is IIS & ARR - which we will test next - I expect issues there too ) Thank you for being on this issue and helping to solve it.

            Agree oliver.straesser@getunik.com, I am re-opening the ticket now.

            Thank you for providing detailed error message. We will review the configuration documentation and update the guide as soon as we have figured out what is wrong. I suspect you are right in that it is probably related to the SSL configuration. We will update here when we know more.

            Thanks!

            Brendan McNamara (Inactive) added a comment - Agree oliver.straesser@getunik.com , I am re-opening the ticket now. Thank you for providing detailed error message. We will review the configuration documentation and update the guide as soon as we have figured out what is wrong. I suspect you are right in that it is probably related to the SSL configuration. We will update here when we know more. Thanks!

            Oliver Straesser added a comment - - edited

            Maybe you open the ticket again - because from my side, the issue isn't solved...

            Synchrony is using the bundled Java version:
            Java version "1.8.0_102"
            Java(TM) SE Runtime Environment (build 1.8.0_102-b14)
            Java HotSpot(TM) 64-Bit Server VM (build 25.102-b14, mixed mode)
            And since Java 8u101 is Let's encrypt trusted.

            Oliver Straesser added a comment - - edited Maybe you open the ticket again - because from my side, the issue isn't solved... Synchrony is using the bundled Java version: Java version "1.8.0_102" Java(TM) SE Runtime Environment (build 1.8.0_102-b14) Java HotSpot(TM) 64-Bit Server VM (build 25.102-b14, mixed mode) And since Java 8u101 is Let's encrypt trusted.

            Hi Brendan

            The files could be loaded, but it doesn't work - May because it's running with a SSL certificate?

            <VirtualHost *:443>
              ServerAdmin webmaster@testconfluence.bitvoodoo.ch
              ServerName testconfluence.bitvoodoo.ch
              ServerAlias www.testconfluence.bitvoodoo.ch
              ServerAlias testconfluence.bitvoodoo.ch.bitvoodoo14.nine.ch
            
              SetEnvIf Host "testconfluence.bitvoodoo.ch.bitvoodoo14.nine.ch" TEST_URL
              Header set X-Robots-Tag "noindex, nofollow" env=TEST_URL
            
              DocumentRoot /home/www-data/testconfluence.bitvoodoo.ch
            
              ErrorLog /home/www-data/logs/testconfluence.bitvoodoo.ch.error.log
              CustomLog /home/www-data/logs/testconfluence.bitvoodoo.ch.access.log combined
            
              UseCanonicalName off
            
              SSLEngine on
              SSLCertificateFile /etc/ssl/letsencrypt/certs/testconfluence.bitvoodoo.ch/cert.pem
              SSLCertificateChainFile /etc/ssl/letsencrypt/certs/testconfluence.bitvoodoo.ch/chain.pem
              SSLCertificateKeyFile /etc/ssl/letsencrypt/private/testconfluence.bitvoodoo.ch/priv.pem
            
              Alias /nine-ssl-check "/var/www"
            
              ProxyRequests Off
              ProxyPreserveHost On
              
              <Proxy *>
                Require all granted
              </Proxy>
              
              ProxyPass /nine-ssl-check/ !
              ProxyPass /.well-known/ !
              ProxyPass /confluence http://localhost:8090/confluence
              ProxyPassReverse /confluence http://localhost:8090/confluence
              <Location /confluence>
                Require all granted
              </Location>
              
              ProxyPass /synchrony http://localhost:8091/synchrony
              <Location /synchrony>
                  Require all granted
                  RewriteEngine on
                  RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]
                  RewriteCond %{HTTP:CONNECTION} ^Upgrade$ [NC]
                  RewriteRule .* ws://localhost:8091%{REQUEST_URI} [P]
              </Location>
              Alias /awstats-icon "/usr/share/awstats/icon/"
              Alias /stats "/usr/lib/cgi-bin/awstats.pl"
              <Location /stats>
                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
                AddHandler cgi-script .pl
                Order allow,deny
                Allow from all
            
                SetEnv AWSTATS_FORCE_CONFIG testconfluence.bitvoodoo.ch
            
                AuthName "Stats"
                AuthType Basic
                AuthUserFile /home/www-data/.htpasswd
                require user nine stats stats_www-data stats_testconfluence.bitvoodoo.ch
              </Location>
            </VirtualHost>
            

            Oliver Straesser added a comment - Hi Brendan The files could be loaded, but it doesn't work - May because it's running with a SSL certificate? <VirtualHost *:443> ServerAdmin webmaster@testconfluence.bitvoodoo.ch ServerName testconfluence.bitvoodoo.ch ServerAlias www.testconfluence.bitvoodoo.ch ServerAlias testconfluence.bitvoodoo.ch.bitvoodoo14.nine.ch SetEnvIf Host "testconfluence.bitvoodoo.ch.bitvoodoo14.nine.ch" TEST_URL Header set X-Robots-Tag "noindex, nofollow" env=TEST_URL DocumentRoot /home/www-data/testconfluence.bitvoodoo.ch ErrorLog /home/www-data/logs/testconfluence.bitvoodoo.ch.error.log CustomLog /home/www-data/logs/testconfluence.bitvoodoo.ch.access.log combined UseCanonicalName off SSLEngine on SSLCertificateFile /etc/ssl/letsencrypt/certs/testconfluence.bitvoodoo.ch/cert.pem SSLCertificateChainFile /etc/ssl/letsencrypt/certs/testconfluence.bitvoodoo.ch/chain.pem SSLCertificateKeyFile /etc/ssl/letsencrypt/private/testconfluence.bitvoodoo.ch/priv.pem Alias /nine-ssl-check "/var/www" ProxyRequests Off ProxyPreserveHost On <Proxy *> Require all granted </Proxy> ProxyPass /nine-ssl-check/ ! ProxyPass /.well-known/ ! ProxyPass /confluence http://localhost:8090/confluence ProxyPassReverse /confluence http://localhost:8090/confluence <Location /confluence> Require all granted </Location> ProxyPass /synchrony http://localhost:8091/synchrony <Location /synchrony> Require all granted RewriteEngine on RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC] RewriteCond %{HTTP:CONNECTION} ^Upgrade$ [NC] RewriteRule .* ws://localhost:8091%{REQUEST_URI} [P] </Location> Alias /awstats-icon "/usr/share/awstats/icon/" Alias /stats "/usr/lib/cgi-bin/awstats.pl" <Location /stats> Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch AddHandler cgi-script .pl Order allow,deny Allow from all SetEnv AWSTATS_FORCE_CONFIG testconfluence.bitvoodoo.ch AuthName "Stats" AuthType Basic AuthUserFile /home/www-data/.htpasswd require user nine stats stats_www-data stats_testconfluence.bitvoodoo.ch </Location> </VirtualHost>

            Thank you for that reply!

            We will test it and I'm be sure that it will work then.

            Communardo Switzerland AG added a comment - Thank you for that reply! We will test it and I'm be sure that it will work then.

              bmcnamara Brendan McNamara (Inactive)
              3767853a13e5 Communardo Switzerland AG
              Affected customers:
              0 This affects my team
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: