You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Admin console is blank when accessing directly, but works over proxy
#13359
We have set up a testing environment where we would like to have an application service talk to a Quarkus-based Keycloak (v18.0.0) via a hardware loadbalancer. As a proof of concept, before bringing in the loadbalancer, we've used an Apache reverse proxy installed on the same machine. All of this works.
However, in trying to switch to the hardware loadbalancer, we found something odd: when we turn the Apache reverse proxy off, or circumvent it, we can no longer access the Keycloak admin console. The page remains blank.
Note that this is completely independent from the hardware loadbalancer - it only listens for a separate DNS name, not the server's own name. This local address should work no matter what.
We've enabled logging, but receive no entries at all on INFO level. Dropping down to DEBUG produces a long list of operations that the website is conducting, executing various scripts and such - the same as is visible when the admin page loads correctly. If there is any difference, we are unable to identify it.
If there is anything else you need to know to help troubleshoot this, please don't hesitate to ask! This is our first attempt to work with Keycloak at all, and we're not really sure yet what info might be relevant.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
We have set up a testing environment where we would like to have an application service talk to a Quarkus-based Keycloak (v18.0.0) via a hardware loadbalancer. As a proof of concept, before bringing in the loadbalancer, we've used an Apache reverse proxy installed on the same machine. All of this works.
However, in trying to switch to the hardware loadbalancer, we found something odd: when we turn the Apache reverse proxy off, or circumvent it, we can no longer access the Keycloak admin console. The page remains blank.
Pointing the browser to https://myserver.mydomain.xyz/auth/admin will internally be intercepted by the Apache proxy and redirected to https://myserver.mydomain.xyz:12345/auth/admin. The admin console login prompt appears and is functional.
However, when browsing directly to https://myserver.mydomain.xyz:12345/auth/admin, we get a white page that seems to be stuck in an infinite reload cycle.
Note that this is completely independent from the hardware loadbalancer - it only listens for a separate DNS name, not the server's own name. This local address should work no matter what.
We've enabled logging, but receive no entries at all on INFO level. Dropping down to DEBUG produces a long list of operations that the website is conducting, executing various scripts and such - the same as is visible when the admin page loads correctly. If there is any difference, we are unable to identify it.
Our startup arguments are:
kc.bat start --auto-build --http-relative-path=auth --http-enabled=false --https-port=12345 --hostname=myserver.mydomain.xyz --db-url-host=[redacted] --db-url-database=[redacted] --db-username=[redacted] --db-password=[redacted] --https-certificate-file=[redacted] --https-certificate-key-file=[redacted]
This is on a Windows Server 2016.
If there is anything else you need to know to help troubleshoot this, please don't hesitate to ask! This is our first attempt to work with Keycloak at all, and we're not really sure yet what info might be relevant.
All reactions