Comments (7)
Note the app which serves HTTPs is just the first application in the nginx configuration with a certificate; this feels rather arbitrary.
Note that I am personally confused by this nginx behaviour as the server_name clearly states it should not serve that request.
So the easiest solution(it seems) would be to prepend a fallback server entry with a self signed certificate for a nonsense domain (eg localhost) which then serves a hardcoded 404. This will (obviously) still trigger the browser warnings about wrong certificate (and/or self signed certificate) but at least would not confuse users by sending traffic to the wrong application.
from deis.
@nathansamson can you post the nginx.conf inside the router for debugging? I'm fairly certain this is already fixed in v2, and the issue here in v1 is simply due to the hard-to-test templating logic.
from deis.
@bacongobbler I've sent you an email with requested config.
I shared this privately with you because it contains domain names which you can guess our clients of which I prefer not to have in public. Feel free to share internally with your collegues when needed, as I have anonymized the most important data anyway.
Please let me know if you need anything else.
I am happy to test a test router image if needed as well
from deis.
@bacongobbler Did you have any chance to look at this?
If not can you give a hint of how a typical server entry is supposed to loolk (both https and non https enabled); and (if any) global config entries are needed?
from deis.
Sorry, I wasn't able to see anything out of the ordinary. I don't believe this is an issue on v2, just with v1.
from deis.
So the reason this happens is that when a default virtualhost isn't specifically identified (for a given port; in this case 443), the first virtualhost automatically becomes the default.
fwiw, this exact behavior was reported early on for router v2 and was solved using the exact solution suggested here. We explicitly designated a default virtualhost with a self-signed cert. This became a "junk drawer" for responding with a 404 to requests that didn't match some other non-default vhost / application.
I'll leave it up to @bacongobbler and @mboersma whether they think it is worth backporting that improvement to Deis v1.x.
from deis.
Deis v1 LTS support ends February 13, 2017, and v1.13.4 is intended to be the last official release, so I'm closing this.
Please see Deis Workflow, the documentation / hub repository for the next-generation PaaS.
from deis.
Related Issues (20)
- Can't build database image HOT 1
- Publisher fails to parse HEALTHCHECK_INITIAL_DELAY if the value contains `\r` HOT 4
- Workflow: can't add readiness probe healthcheck HOT 2
- Unable to push app to builder (deis-workflow) HOT 9
- Is it possible to disallow features at a cluster level? HOT 3
- Unable to Deploy on v2.8.0 ontop of Digitalocean K8 Cluster HOT 6
- nds
- LTS won't build with Go 1.7.3 HOT 2
- Pushing an app crashes the pod network HOT 1
- Off cluster Minio HOT 1
- How to change timezone? HOT 4
- Deis login command hangs when invoked via a bash shell script HOT 2
- ป้ายหน้าหมู่บ้านพระราม 2 ซิตี้
- Could not create the Namespace in Kubernetes - deis config:push
- Git push hangs on "Pushing to registry" HOT 3
- InvalidDomainNameLabel while provisioning Docker EE on Azure HOT 1
- Deis builder push operation timed out
- cluster namespaces conflicts when using same deis login HOT 3
- deis CLI version changing HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from deis.