Webrdp and websockets not working with Nginx Reverse Proxy

Webrdp and websockets not working with Nginx Reverse Proxy

Hi,

It seems like i am having some issues getting WebRDP and Websockets to work in general. I am using Nginx reverse proxy and i do not get notifications, chats do not work correctly most of the time and worst of all. WebRDP does not work at all. 
it is not a major issue as i have Endpoint Central for RDP. But as it is rather unreliable, it would be great to have a second option!.

I was hoping someone might have figured it out and could spot the mistakes in my Nginx conf or maybe even just give a few performance tips for the config?




  1. #SDP WebRDP port = 8083
  2. #SDP Server = 10.100.200.200
  3. #SDP Server HTTPS Port = 8080

  4. ################################################################################
  5. #HTTP to HTTPS Forward
  6. server {
  7.     listen 80;
  8.     server_name servicedesk.domain.com; 
  9.     return 301 https://servicedesk.domain.com$request_uri;
  10. }

  11. ################################################################################
  12. #Vhost for port 443 HTTPS forward to port 8080
  13. server {
  14.         listen  443 ssl http2;
  15.         server_name  servicedesk.domain.com;

  16.         #SSL Config    
  17.         ssl_certificate /etc/ssl/domain.com.bundle.pem;
  18.         ssl_certificate_key /etc/ssl/private.key;
  19.         ssl_session_cache  builtin:1000  shared:SSL:10m;
  20.         ssl_session_timeout 10m;
  21.         add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
  22.         ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
  23.         ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4:!3DES:!CAMELLIA;
  24.         ssl_prefer_server_ciphers on;


  25.         #Additional settings
  26.         client_max_body_size    50M;
  27.         keepalive_timeout       70;
  28.         port_in_redirect        off;
  29.         include /etc/nginx/mime.types;

  30.         #Log Files for port 443
  31.         access_log      /var/log/nginx/sdp443.access.log;
  32.         error_log       /var/log/nginx/sdp443.error.log;



  33.                 #Location for port 443 forward to 8080
  34.                 location / {
  35.                 proxy_set_header        Host $host;
  36.                 proxy_set_header        X-Real-IP $remote_addr;
  37.                 proxy_set_header        X-Real-Host $host;
  38.                 proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
  39.                 proxy_set_header        X-Forwarded-Proto $scheme;
  40.                 proxy_pass              https://10.100.200.200:8080;
  41.                 proxy_read_timeout      120;

  42.                 
  43.             # WebSocket support
  44.               proxy_http_version      1.1;
  45.             proxy_set_header        Upgrade $http_upgrade;
  46.             proxy_set_header        Connection "upgrade";

  47.                           }

  48. }


  49. ################################################################################
  50. #Vhost port 8083 for WebRDP
  51. server{
  52.       listen 8083 ssl http2;
  53.       server_name servicedesk.domain.com;

  54.       #SSL Config for port 8083 WEBRDP
  55.       ssl_certificate /etc/ssl/domain.com.bundle.pem;
  56.       ssl_certificate_key /etc/ssl/private.key;
  57.       ssl_session_timeout 20m;
  58.       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  59.       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  60.       ssl_prefer_server_ciphers on;
  61.       ssl_verify_client off;

  62.       #Additional settings
  63.       client_max_body_size    50M;
  64.       keepalive_timeout       70;
  65.       port_in_redirect        off;
  66.       include /etc/nginx/mime.types;


  67.       #Location for 8083
  68.       location /{
  69.       proxy_http_version 1.1;
  70.       proxy_pass https://10.100.200.200:8083; 
  71.       proxy_set_header Host $host;   
  72.       proxy_set_header Upgrade $http_upgrade;
  73.       proxy_set_header Connection "upgrade";  
  74.  
  75.                 }
  76. }

























      • Topic Participants

      • jna

                  New to ADSelfService Plus?