Nginx reverse proxy isn't working with context path

See also questions close to this topic

• best way to add a spring boot web application with JSPs to a docker container?

  so i have a spring boot web application, it uses JSPs, and im supposed to put it in a container .
  my question is what is the best way ? ive tried to copy the project and then run it there using a wmvn like so : dockerfile:

  FROM openjdk:8-jdk-alpine
  ADD . /input-webapp
  WORKDIR /input-webapp
  EXPOSE 8080:8080
  ENTRYPOINT ./mvnw spring-boot:run
  

  which works, but it takes a long time getting the dependencies and feels messy .
  

  and ive tried to package it into a jar, and then copy the jar only, and run it : dockerfile:

  FROM openjdk:8-jdk-alpine
  ADD target/input-webapp-0.0.1-SNAPSHOT.jar input-webapp-0.0.1-SNAPSHOT.jar
  EXPOSE 8080:8080
  ENTRYPOINT ["java","-jar","input-webapp-0.0.1-SNAPSHOT.jar"]
  

  but this way it cant see the JSPs, or at least i think this is the problem, as i get a 404.
  

  so is there a better way ? can i copy the jsps plus the jar to make it work? thanks
• build spring boot (mvnw) with docker can not use cache

  Spring Boot Docker Experimental Features Docker 18.06 comes with some “experimental” features, including a way to cache build dependencies. To switch them on, you need a flag in the daemon (dockerd) and an environment variable when you run the client. With the experimental features, you get different output on the console, but you can see that a Maven build now only takes a few seconds instead of minutes, provided the cache is warm.

  my dockerfile can not use cache.

  dockerfile

  # syntax=docker/dockerfile:experimental
  FROM openjdk:8-jdk-alpine as build
  WORKDIR /workspace/app
  
  COPY mvnw .
  COPY .mvn .mvn
  COPY pom.xml .
  COPY src src
  
  RUN --mount=type=cache,target=/root/.m2 ./mvnw install -DskipTests -s .mvn/wrapper/settings.xml
  RUN mkdir -p target/extracted && java -Djarmode=layertools -jar target/*.jar extract --destination target/extracted
  
  FROM openjdk:8-jre-alpine
  ENV TZ Asia/Shanghai
  RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
  RUN addgroup -S spring && adduser -S spring -G spring
  USER spring:spring
  
  ARG EXTRACTED=/workspace/app/target/extracted
  ARG JAVA_OPTS="-Xmx100m -Xms100m"
  
  COPY --from=build ${EXTRACTED}/dependencies/ ./
  COPY --from=build ${EXTRACTED}/spring-boot-loader/ ./
  COPY --from=build ${EXTRACTED}/snapshot-dependencies/ ./
  COPY --from=build ${EXTRACTED}/application/ ./
  
  ENTRYPOINT ["sh", "-c","java ${JAVA_OPTS} org.springframework.boot.loader.JarLauncher"]
  

  run shell

  DOCKER_BUILDKIT=1 docker build -t org/spring-boot .
  

  every time use many minutes
• PyQT5 doesn't work on docker ImportError: libsmime3.so: cannot open shared object file: No such file or directory

  I have a Dockerfile with PyQT installed like below

  FROM ubuntu:20.04
  ENV DEBIAN_FRONTEND=noninteractive
  RUN adduser --quiet --disabled-password qtuser && usermod -a -G audio qtuser
  RUN apt-get update -y \
      && apt-get install alsa -y \
      && apt-get install -y python3-pyqt5 \
      && apt-get install python3-pip -y && \
      pip3 install pyqtwebengine
  WORKDIR /htmltopdf
  

  I built my image like this docker build -t html-to-pdf .

  Then I ran my image like this docker run --rm -v "$(pwd)":/htmltopdf -u qtuser -it html-to-pdf python3 htmlToPdfnew.py --url https://www.w3schools.com/howto/howto_css_register_form.asp

  But I'm getting below error

  Traceback (most recent call last):
    File "htmlToPdfnew.py", line 2, in <module>
      from PyQt5 import QtWidgets, QtWebEngineWidgets
  ImportError: libsmime3.so: cannot open shared object file: No such file or directory
  

  I do NOT get that error in my PC.

  below is my python code

  import sys
  from PyQt5 import QtWidgets, QtWebEngineWidgets
  from PyQt5.QtCore import QUrl, QTimer
  from PyQt5.QtGui import QPageLayout, QPageSize
  from PyQt5.QtWidgets import QApplication
  import argparse
  
  
  def main():
      url = ''
      parser = argparse.ArgumentParser(description="Just an example", formatter_class=argparse.ArgumentDefaultsHelpFormatter)
      parser.add_argument("--url", help="Type url")
      args = parser.parse_args()
      config = vars(args)
      url = config['url']
  
  
      app = QtWidgets.QApplication(sys.argv)
      loader = QtWebEngineWidgets.QWebEngineView()
      loader.setZoomFactor(1)
      layout = QPageLayout()
      layout.setPageSize(QPageSize(QPageSize.A4Extra))
      layout.setOrientation(QPageLayout.Portrait)
      loader.load(QUrl(url))
      loader.page().pdfPrintingFinished.connect(lambda *args: QApplication.exit())
  
      def emit_pdf(finished):
          QTimer.singleShot(2000, lambda: loader.page().printToPdf("test.pdf", pageLayout=layout))
  
      loader.loadFinished.connect(emit_pdf)
      sys.exit(app.exec_())
  
  if __name__ == '__main__':
      main()
  

  so how do I resolve below error ?

  Traceback (most recent call last):
    File "htmlToPdfnew.py", line 2, in <module>
      from PyQt5 import QtWidgets, QtWebEngineWidgets
  ImportError: libsmime3.so: cannot open shared object file: No such file or directory
  
• Nginx bulk URL redirect by include a separated file but not working as I want

  I am not very familiar with Nginx URL redirect. But I have followed some suggestions from Google search and unfortunately none of them meet my expectation.

  I need to redirect at least 100 old URLs to different new URLs. I already have another server.conf file under /etc/nginx/conf.d/ for some URL redirect and other settings. But I would like to create another nginx_redirect.txt file to store those 100 URLs redirect and keep away from server.conf. Furthermore, some of the old 100 URLs are also defined in server.conf file, but I was hoping the new nginx_rewrite.txt file can override the redirect URLs defined in server.conf file.

  I use multiple "include" in the nginx.conf as below:

  include /etc/nginx/conf.d/*.conf;
  Server {
     ...
     include /etc/nginx/conf.d/nginx_rewrite.txt;
     ...
  }
  

  The existing server.conf file for some URL redirect as below:

  server {
      ...
      location ~ ^/lp/old/ {
          rewrite ^(.*)$ https://currenturl.com/ permanent;
      }
  }
  

  I create new nginx_redirect.txt and hope to override the redirect URL in server.conf.

  location ~ ^/lp/old/ {
      rewrite ^(.*)$ https://newurl.com/ permanent;
  }
  

  I used below commands to ensure those .conf and .txt can be seen by Nginx.

  nginx -T
  nginx -s reload
  

  However I found those old URLs defined in nginx_rewrite.txt didn't redirect to newurl.com/ but still to currenturl.com/. Even I set up some new URL in nginx_rewrite.txt, which is not defined in server.conf. Those new URL will show 404 instead of redirecting to other URL. Unless I defined those new URL in server.conf.

  My questions:

  1. Is my setting in nginx.conf, server.conf and nginx_rewrite.txt correct?
  2. Is there not possible to override URL in permanent redirect of .conf?
• 502 BAD Gateway | ingress nginx with cert-manager

  I am using nginx ingress v1.1.3 in azure AKS v1.21. My traffic is getting terminated at nginx ingress for all other domains and it is working as expected.

  Recently I added cert-manager to manage certificate, but when implemented i am getting 502 for this particular ingress and same is working if i use my custom certificate.

  Here's my ingress configuration :

  apiVersion: networking.k8s.io/v1
  kind: Ingress
  metadata:
    name: new-dns
    namespace: application-production
    annotations:
      kubernetes.io/ingress.class: "nginx"
      nginx.ingress.kubernetes.io/auth-tls-verify-client: "off"
      nginx.ingress.kubernetes.io/ssl-passthrough: "false"
      cert-manager.io/cluster-issuer: "letsencrypt"
      nginx.ingress.kubernetes.io/connection-proxy-header: upgrade
      nginx.ingress.kubernetes.io/http2-push-preload: "true"
      nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
      nginx.ingress.kubernetes.io/ssl-prefer-server-ciphers: "true"
  spec:
    tls:
    - hosts:
      - xxx-xxxxxx.com
      secretName: new-dns
    rules:
    - host: xxx-xxx.com
      http:
        paths:
        - pathType: Prefix
          path: /
          backend:
            service:
              name: my-backend
              port:
                number: 8080
  

  Logs of nginx when configuration applied

  I0507 02:25:05.236731       7 admission.go:149] processed ingress via admission controller {testedIngressLength:11 testedIngressTime:0.076s renderingIngressLength:11 renderingIngressTime:0.001s admissionTime:1.2MBs testedConfigurationSize:0.077}
  I0507 02:25:05.236761       7 main.go:100] "successfully validated configuration, accepting" ingress="application-production/anew-dns"
  I0507 02:25:05.258742       7 store.go:427] "Found valid IngressClass" ingress="application-production/anew-dns" ingressclass="nginx"
  I0507 02:25:05.259236       7 event.go:282] Event(v1.ObjectReference{Kind:"Ingress", Namespace:"application-production", Name:"anew-dns", UID:"a95d83e7-51ad-472d-a5a2-5f4cc6352e81", APIVersion:"networking.k8s.io/v1", ResourceVersion:"137003252", FieldPath:""}): type: 'Normal' reason: 'Sync' Scheduled for sync
  I0507 02:25:05.260169       7 controller.go:159] "Configuration changes detected, backend reload required"
  I0507 02:25:05.418604       7 controller.go:176] "Backend successfully reloaded"
  I0507 02:25:05.418745       7 event.go:282] Event(v1.ObjectReference{Kind:"Pod", Namespace:"ingress-nginx", Name:"ingress-nginx-controller-756f546d89-69xnq", UID:"bdc7b594-4070-465c-b7a9-afc846e3e7a9", APIVersion:"v1", ResourceVersion:"136713253", FieldPath:""}): type: 'Normal' reason: 'RELOAD' NGINX reload triggered due to a change in configuration
  I0507 02:25:22.295245       7 event.go:282] Event(v1.ObjectReference{Kind:"Ingress", Namespace:"application-production", Name:"anew-dns", UID:"a95d83e7-51ad-472d-a5a2-5f4cc6352e81", APIVersion:"networking.k8s.io/v1", ResourceVersion:"137003343", FieldPath:""}): type: 'Normal' reason: 'Sync' Scheduled for sync
  
  

  Error after sometime

  2022/05/07 02:03:44 [error] 12307#12307: *4399339 upstream prematurely closed connection while reading response header from upstream, client: xx.xx.xx.xx, server: xxxx.xxxx.xxx, request: "GET / HTTP/2.0", upstream: "http:/xx.xx.xx.xx:8080/", host: "xxxx.xxxx.xxxx"
  
• Google Cloud Compute Engine http Connection Timeout

  I have setup a compute engine VM with 2vCPU and 2GB RAM.I have setup nginx server and setup the firewalls permissions as shown in the diagram. When I try to access the angular files hosted on the server using the external IP I get the error "The connection has timed out" and when I try to use curl on the terminal, it displays the error "curl: (28) Failed to connect to IP port 80 after 129163 ms: Connection timed out".

  Both the Http and Https firewall rules are enabled Whe I run the command

  sudo systemctl status apache2
  

  This is the result I get

  netstat -tulpn | grep LISTEN
  

  

  enter code here
  

  Any ideas on what the issue might be will be really helpful
• Apache 2.4 never runs RewriteMap program

  Since JavaScript cannot access HTTP header Accept-Language, I decided to pass this information to a custom cookie using .htaccess as follows:

  RewriteRule .* - [CO=HTTP-Accept-Language:%{HTTP:Accept-Language}:%{HTTP_HOST}:1:/]
  

  However, I quickly realized that cookies values are not allowed to use some "special" characters, including semicolon, which is used within Accept-Language header.

  Therefore, I decided to use a simple RewriteMap program written in Perl to replace semicolons with underscore characters.

  #!/usr/bin/perl
  $| = 1;
  while (<STDIN>) {
    s/;/_/g;
    print $_;
  }
  

  In my httpd.conf I defined the RewriteMap with

  LogLevel trace8
  
  <IfModule rewrite_module>
    RewriteEngine on
    Mutex default
    RewriteMap lc int:tolower
    RewriteMap uc int:toupper
    RewriteMap escape int:escape
    RewriteMap myprg "prg:/etc/httpd/rewrite/myprg.pl"
  </IfModule>
  

  and to test these RewriteMap functions, I modified my .htaccess as follows:

  RewriteEngine On
  RewriteBase /
  
  RewriteRule .* - [CO=Test1:${uc:%{HTTP:Accept-Language}}:%{HTTP_HOST}:1:/]
  RewriteRule .* - [CO=Test2:${myprg:%{HTTP:Accept-Language}}:%{HTTP_HOST}:1:/]
  

  Unfortunately, while uc RewriteMap function works fine, the external myprg doesn't.

  With LogLevel trace8 in place, I expected some useful information in log file. But all I found about this external script was this:

  map lookup OK: map=myprg key=en-US,en;q=0.9 -> val=
  

  No error, just information that val is empty. Based on this finding, I modified my Perl script to include some internal logging:

  #!/usr/bin/perl
  
  use Cwd qw(abs_path);
  use File::Spec;
  use POSIX;
  
  $| = 1;
  
  my (undef, $directory, $filename) = File::Spec->splitpath(abs_path($0));
  
  open my $file, '>>:encoding(UTF-8)', $directory . ($filename =~ s/(?:\.[^.]*)$/.log/r);
  print  {$file} (strftime "%F %T", localtime time) . "\tRewriteMap script $filename started\n";
  close   $file;
  
  while (<STDIN>) {
    s/;/?/g;
    print $_;
  }
  

  After each change, I obviously also restarted Apache server by systemctl restart httpd

  Then I realized that my Apache 2.4.6 (CentOS) never run the external RewriteMap script myprg.

  ---

  I spent hours researching a possible problem on my side, but I didn't find anything wrong in my configuration files. What am I doing wrong? Why do I see no error, no warning, despite the script is never called?
• IIS Web.config Rewrite rules - Redirect rules with - or + chars

  https://someserver.com/path01/2011/abc+and+def/88722
  https://someserver.com/path01/2011/abc-and-def/88722
  

  I have several URLs that I need to create a redirect rule. I need to remove "2011" from the url and change the URL... I got most of it working but I can't figure out how the "-" or "+" needs to be written and how to combine into one rule

  <rule name="Redirection 1" stopProcessing="true">
     <match url="test-catalog/([0-9]*)//abc-and-def/([0-9]*)"/>
     <action type="Redirect" url="https://someserver.com/path01/overview/{R:2}#/abc-and-def"/>
  </rule>
  <rule name="Redirection 2" stopProcessing="true">
     <match url="test-catalog/([0-9]*)//abc+and+def/([0-9]*)"/>
     <action type="Redirect" url="https://someserver.com/path01/overview/{R:2}#/abc-and-def"/>
  </rule> 
  

  I tried to use this use rule but it's not working !!

  <rule name="Redirection rule " stopProcessing="true">
     <match url="test-catalog/([0-9]*)//abc([-+]*)and([-+]*)def/([0-9]*)"/>
     <action type="Redirect" url="https://someserver.com/path01/overview/{R:4}#/abc-and-def"/>
  </rule> 
  

  Any ideas on how to solve this issue?
• How to escape/encode characters in .htaccess RewriteRule

  I want the Accept-Language header to be available in JavaScript, therefore in my .htaccess I set the following rule:

  RewriteRule .* - [CO=HTTP-Accept-Language:%{HTTP:Accept-Language}:%{HTTP_HOST}:0:/]
  

  This works, but not as anticipated.

  The cookie is set as following:

  Set-Cookie: HTTP-Accept-Language=en-US,en;q=0.9; path=/; domain=XXXXXX.XX
  

  Since the cookie value contains ; character, JavaScript's document.cookie trims this value to

  en-US,en
  

  How can I force RewriteRule to escape\encode deliminator characters (; and space) to ensure that the entire cookie value is properly recorded?
• AWS Lambda serve over Http instead of Https

  I'm running a web-based application over Lambda + API Gateway. By default, API Gateway serves and forces HTTPS. For custom domains also creating an SSL certificate is mandatory.

  Is there any hack to serve on HTTP instead of HTTPS?
• Nginx proxy_cookie_header not working (domain<-> sub domain)

  i'm exhausted about this issue.. for 2days... I believe that there are someone who can catch the bug..
  Nowadays i'm make a website. it totally ok in local system.. but this error happend. when release by nginx reverse proxy.

  [enviorment]
  Frontend - Next.js (owl-dev.me)
  Backend - .Net Core (backend.owl.dev.me)
  Nginx - 1.18.0

  [issue]
  I got a Cookie from Backend after login. but the cookie's domain is not owl-dev.me but backend.owl.dev.me. so can't save and get cookie in ssr (* if i change the domain name manually in browser it work fine) enter image description here

  [what i tried]
  i found that nginx can change cookie domain by nginx. proxy_cookie_domain but it didn't work.
  some article say that can work by Regular expression but didn't work.
  how i can fix this? what's the matter??!!?

  [Nginx setting]
  

  server {
      # SSL configuration
      #
      listen 443 ssl http2 default_server;
      listen [::]:443 ssl http2 default_server;
      client_max_body_size 10M;
  
      ssl_certificate "/etc/letsencrypt/live/www.owl-dev.me/fullchain.pem";
      ssl_certificate_key "/etc/letsencrypt/live/www.owl-dev.me/privkey.pem";
      ssl_dhparam "/etc/nginx/ssl/dhparams.pem";
  
      add_header Strict-Transport-Security "max-age=31536000";
  
      # Add index.php to the list if you are using PHP
  
      server_name owl.dev.me  www.owl-dev.me;
  
      location / {
          proxy_set_header Host $host;
          proxy_pass http://localhost:3000;
      }   
  }
  
  server {
      # SSL configuration
      #
      listen 443 ssl http2;
      listen [::]:443 ssl http2 ;
      client_max_body_size 10M;
  
      ssl_certificate "/etc/letsencrypt/live/backend.owl-dev.me/fullchain.pem";
      ssl_certificate_key "/etc/letsencrypt/live/backend.owl-dev.me/privkey.pem";
      ssl_dhparam "/etc/nginx/ssl/dhparams.pem";
  
      server_name backend.owl-dev.me;
  
      location / {
          proxy_cookie_domain ~^(.*)$ "$1; Domain=backend.owl-dev.me";
          proxy_set_header Host www.owl-dev.me;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Proto $scheme;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
          proxy_set_header X-Real-IP $remote_addr;
          proxy_pass https://localhost:5001;
      }
  }
  
• Decoding https request/response

  Have difficulty using local overrides in latest version of Chrome on some files. Made a simple debugging proxy using self-signed certificate. Can obtain request/response content. Can see http/1.1 and some text in the messages. Сontent doesn't look like encrypted.

  How to decode headers, body?

  Simplified code:

  func handleTunneling(w http.ResponseWriter, r *http.Request) {
      w.WriteHeader(http.StatusOK)
      hijacker := w.(http.Hijacker)
      client_conn, _, _ := hijacker.Hijack()
      buf := make([]byte, 32 * 1024)
      nr, _ := client_conn.Read(buf)
      // save buf[0:nr] to file ...
      dest_conn, _ := net.DialTimeout("tcp", r.Host, 10*time.Second)
      // send buf to dest_conn ...
  
      // do same again in opposite direction ...
  }
  

  Full code

  Request:

  Respose:
• How do create a splitting container in flutter? What should be the right approach? CustomPainter or Chip?

  Wanted to replicate some UI. Can I do this with in built flutter widgets? I have tried using Chip but was not able to. Will CustomPainter be the right thing to use ?
• Saving Icon to Hive DB in Flutter

  Can anyone help me. How to Save Icon in hive database in flutter. And to read it.

  When I'm saving Icons it is giving error

  unhandled exception: hiveerror: cannot write, unknown type: icon.
  

  But when removing icon from hive database class and adapter it works fine.
• Flutter settings.name incomplete on page reload

  I have a route setup. In the browser, it looks like this.

  localhost:1234/#/member/D8B5D7F17639A28FE83C47AFFC69592E?
  

  I use an onGenerateRoute function like this (very truncated)

  Route<dynamic> generateRoute(RouteSettings settings) {
    Uri uri = Uri.parse(settings.name ?? "");
    final Map args = (settings.arguments ?? {}) as Map<dynamic, dynamic>;
    List<String> urlParts = uri.path.substring(1).split("/");
    urlParts[0] = '/' + urlParts[0];
    Widget selectedRoute = () {
      print(urlParts);
      if (urlParts[0] == '/member') {
        return CardGuestViewProfile(memberCode: urlParts[1]);
      }
      return AppHomeScreen();
    }()
  
    return MaterialPageRoute(builder: (context) => selectedRoute,
      settings: RouteSettings(name: settings.name));
  }
  

  Everything works great. The print statement outputs:

  [/member, D8B5D7F17639A28FE83C47AFFC69592E]
  

  However, if I refresh the page. The visible url is not overwritten. It still says

  localhost:1234/#/member/D8B5D7F17639A28FE83C47AFFC69592E?
  

  But I get Unexpected null value for urlParts[1] because urlParts now prints as

  [/member]