At one point I tried using Cloudstack for terminating the SSL, but have since switched to Apache because that is easier. Apache handles SSL termination and proxies the 443 connection to Cloudstack localhost 8080. I have Cloudstack only binding 8080 to localhost, so it is not accessible except over SSL.
I have not gotten around to configuring the console access to work. Both clusters I've run are very much testing only side projects. Darren -- This e-mail is confidential. Any distribution, use or copying of this e-mail or the information it contains other than by the intended recipient is forbidden. If you are not the intended recipient, please advise the sender (by return e-mail or otherwise) immediately and delete this e-mail. From: "Nux" <n...@li.nux.ro> To: "users" <users@cloudstack.apache.org> Sent: Monday, December 5, 2022 5:36:09 AM Subject: Re: Redirect HTTP 8080 to HTTPS 8443 on Cloudstack 4.17.1.0 I never bothered to do this in Cloudstack, I always used Apache to terminate SSL and do proxy requests, you can of course use any other web servers for this (nginx, lighttpd). --- Nux [ http://www.nux.ro/ | www.nux.ro ] On 2022-12-02 13:58, Granwille Strauss wrote: Hi Guys Would like to follow up on this any ideas? On 11/18/22 16:47, David Larsen wrote: BQ_BEGIN Hi We are using Cloudstack 4.17.1.0. [ https://host.domain.com:8443/ | Https://host.domain.com:8443 ] works fine. I followed to steps below to redirect http 8080 to https 8443 with no luck.... Is there another way to do this in 4.17.1.0? Hope so... :-) ------------ For auto redirection from 8080 to 8443, Add below content in '/usr/share/cloudstack-management/webapp/WEB-INF/web.xml' file at line 22 <security-constraint> <web-resource-collection> <web-resource-name>Everything in the webapp</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint> <Call name="addConnector"> <Arg> <New class="org.eclipse.jetty.nio.SelectChannelConnector"> ... <Set name="confidentialPort">8443</Set> </New> </Arg> </Call> Restart the management service systemctl restart cloudstack-management Best regards David Larsen -- Regards / Groete [ https://www.namhost.com/ ] Granwille Strauss // Senior Systems Admin e: [ mailto:granwi...@namhost.com | granwi...@namhost.com ] m: +264 81 323 1260 w: [ https://www.namhost.com/ | www.namhost.com ] [ https://www.facebook.com/namhost ] [ https://twitter.com/namhost ] [ https://www.instagram.com/namhostinternetservices/ ] [ https://www.linkedin.com/company/namhos ] [ https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA ] [ https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner ] Namhost Internet Services (Pty) Ltd , 24 Black Eagle Rd, Hermanus, 7210, RSA The content of this message is confidential. If you have received it by mistake, please inform us by email reply and then delete the message. It is forbidden to copy, forward, or in any way reveal the contents of this message to anyone without our explicit consent. The integrity and security of this email cannot be guaranteed over the Internet. Therefore, the sender will not be held liable for any damage caused by the message. For our full privacy policy and disclaimers, please go to [ https://www.namhost.com/privacy-policy | https://www.namhost.com/privacy-policy ] [ https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818 ] BQ_END
