# Apache reverse proxy with fireedge

**URL:** <https://forum.opennebula.io/t/apache-reverse-proxy-with-fireedge/11101>\
**Category:** Product Support\
**Created:** [February 27, 2023, 1:18pm UTC](https://forum.opennebula.io/t/apache-reverse-proxy-with-fireedge/11101 "2023-02-27T13:18:05Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jerome](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/jerome/32/6902_2.png) [@jerome](https://forum.opennebula.io/u/jerome)\
**Post date:** [February 27, 2023, 1:18pm UTC](https://forum.opennebula.io/t/apache-reverse-proxy-with-fireedge/11101/1 "2023-02-27T13:18:05Z")

</div>

Hello,  
I have a problem with no display on my vmrc console.  
I installed minione by default on debian 11.  
My infrastructure is on vmware vcenter 8.  
I have apache reverse proxy in 2.4 (another vm).  
on my firewall the open ports are 443.  
here is my vhost apache configuration and my sunstone server.conf

\<VirtualHost \*:443\>

```
# Décommentez cette ligne et indiquez-y l'adresse courriel de l'administrateur du site
#ServerAdmin webmaster@my-domain.com

# Classique, votre nom de domaine
ServerName exemple.com

# Si jamais vous avez d'autres domaines renvoyant sur ce site, utilisez la dircetive ServerAlias
# Vous pouvez utiliser le joker * pour prendre en compte tout les sous-domaines
#ServerAlias www2.my-domain.com www.my-other-domain.com *.yet-another-domain.com

# L'emplacement des logs.
ErrorLog /var/log/apache2/monsite.tld-error.log
LogLevel warn
CustomLog /var/log/apache2/monsite.tld-access.log combined

# SSL magic
#
# Il est nécessaire d'activer SSL, sinon c'est http qui sera utilisé
SSLEngine On

# On autorise uniquement les clefs de cryptage longue (high) et moyenne (medium)
# SSLCipherSuite HIGH:MEDIUM

# On autorise SSLV3 et TLSv1, on rejette le vieux SSLv2
# SSLProtocol all -SSLv2

# La clef publique du serveur :
SSLCertificateFile /etc/apache2/ssl/XXXXXXXX.cer

# La clef privée du serveur:
SSLCertificateKeyFile /etc/apache2/ssl/XXXXXXXX.key

# Theses lines only apply of the rewrite module is enabled.
# This is a security enhancement recommanded by the nessus tool.
SSLProxyEngine On
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off

#Ne commentez jamais cette ligne, elle évite que votre serveur soit utilisé comme proxy par des gens mal-intentionnés.
ProxyRequests Off

# Cetet option passe les nom d'hôte au serveur, ce qui vous permet d'utiliser également des hôtes virtuels sur le serveur principal.
ProxyPreserveHost On

# Les lignes classiques de proxy. Comme dit au dessus, on passe le flux en http.
ProxyPass / http://XXXXXX:2616/
ProxyPassReverse / http://XXXXXXX:2616/

# Autoriser l'accès au contenu à travers le proxy.
#Ne l'enlevez pas si vous voulez que le site fonctionne !
<Location />

```

# --------------------------------------------------------------------------

# Copyright 2002-2022, OpenNebula Project, OpenNebula Systems

# 

# Licensed under the Apache License, Version 2.0 (the “License”); you may

# not use this file except in compliance with the License. You may obtain

# a copy of the License at

# 

# [Apache License, Version 2.0 | Apache Software Foundations](http://www.apache.org/licenses/LICENSE-2.0)

# 

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an “AS IS” BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

#--------------------------------------------------------------------------- #

################################################################################

# Server Configuration

################################################################################

# Directory to store temp files when uploading images

# 

:tmpdir: /var/tmp

# OpenNebula sever contact information

# 

:one\_xmlrpc: [http://localhost:2633/RPC2](http://localhost:2633/RPC2)  
:one\_xmlrpc\_timeout: 60

# :subscriber\_endpoint to subscribe for OpenNebula events must match those in

# oned.conf

:subscriber\_endpoint: tcp://localhost:2101

# Server Configuration

# 

:host: 0.0.0.0  
:port: 80

# Place where to store sessions, this value can be memory, memcache or memcache-dalli

# Use memcache when starting multiple server processes, for example,

# with passenger

# 

# NOTE. memcache needs a separate memcached server to be configured. Refer

# to memcached documentation to configure the server.

:sessions: memory

# Memcache configuration

:memcache\_host: localhost  
:memcache\_port: 11211  
:memcache\_namespace: opennebula.sunstone

# Excution environment for Sunstone

# dev, Instead of pulling the minified js all the files will be pulled (app/main.js)

# Check the Building from Source guide in the docs, for details on how to run

# Sunstone in development

# prod, the minified js will be used (dist/main.js)

:env: ‘prod’

# Maximum allowed size of uploaded images (in bytes). Leave commented for

# unlimited size

# :max\_upload\_file\_size: 10737418240 # 10 GiB

################################################################################

# Log

################################################################################

# Log debug level

# 0 = ERROR, 1 = WARNING, 2 = INFO, 3 = DEBUG

# 

# System

# - file: log to log file

# - syslog: log to syslog

:log:  
:level: 3  
:system: ‘file’

################################################################################

# Proxy

################################################################################

# Enable an http proxy for the support portal and to download MarketPlaceApps

# from the MarketPlace to the user’s desktop.

# :proxy: http://:

# :no\_proxy: localhost, 127.0.0.0/8

################################################################################

# Auth

################################################################################

# Authentication driver for incoming requests

# sunstone: for OpenNebula’s user-password scheme

# x509: for x509 certificates based authentication

# opennebula: the authentication will be done by the opennebula core using the

# driver defined for the user

# remote: performs the login based on a Kerberos REMOTE\_USER variable or

# X-Auth-Username header provided by authentication backend

# 

:auth: opennebula

# Authentication driver to communicate with OpenNebula core

# cipher, for symmetric cipher encryption of tokens

# x509, for x509 certificate encryption of tokens

# 

:core\_auth: cipher

# Two Factor Authentication Issuer Label

:two\_factor\_auth\_issuer: opennebula

################################################################################

# WebAuthn

################################################################################

# This value needs to match `window.location.origin` evaluated by the User Agent

# during registration and authentication ceremonies. Remember that WebAuthn

# requires TLS on anything else than localhost.

:webauthn\_origin: [http://localhost:9869](http://localhost:9869)

# Relying Party name for display purposes

:webauthn\_rpname: ‘OpenNebula Cloud’

# Optional client timeout hint, in milliseconds. Specifies how long the browser

# should wait for any interaction with the user.

:webauthn\_timeout: 60000

# Optional differing Relying Party ID

# See [Web Authentication: An API for accessing Public Key Credentials - Level 2](https://www.w3.org/TR/webauthn/#relying-party-identifier)

# :webauthn\_rpid: [example.com](http://example.com)

# Supported cryptographic algorithms

# See [https://www.iana.org/assignments/jose/jose.xhtml](https://www.iana.org/assignments/jose/jose.xhtml)

# Possible is any list of

# ES256 | ES384 | ES512 | PS256 | PS384 | PS512 | RS256 | RS384 | RS512 | RS1

# :webauthn\_algorithms: [ES256, PS256, RS256]

################################################################################

# UI Settings

################################################################################

# :vnc\_proxy\_

# port: port where the vnc proxy will listen. Could be prefixed with

# an address on which the sever will be listening (ex: 127.0.0.1:29876).

# support\_wss: no | yes | only. For yes and only, provide path to

# cert and key. “yes” means both ws and wss connections will be

# supported.

# cert: Certificate to encrypt wss connections.

# key: Key for wss connections. Only necessary if not included in cert.

# ipv6: Enable ipv6 support for novnc-server

# 

# :vnc\_client\_port: port where the vnc JS client will connect

# If not set, will use the port section of :vnc\_proxy\_port

# :vnc\_request\_password: true | false

# Request VNC password for external windows, by default it will not be requested

# 

# :allow\_vnc\_federation: yes | no

# Allow VNC functionality in remote OpenNebula in a federation (needs special setup)

:vnc\_proxy\_port: 29876  
:vnc\_proxy\_support\_wss: no  
:vnc\_proxy\_cert:  
:vnc\_proxy\_key:  
:vnc\_proxy\_ipv6: false  
:vnc\_request\_password: false  
:allow\_vnc\_federation: no

# Login Session Length in seconds, defaults to 1 hour.

#:session\_expire\_time: 3600

# True to display ‘Keep me logged in’ option.

:keep\_me\_logged: true

# Default language setting

:lang: en\_US

# Default table order

:table\_order: desc

# Default views directory

:mode: ‘mixed’

# Retrieve extended information from OpenNebula

:get\_extended\_vm\_info: false

# Retrieve extended information about monitoring from OpenNebula

:get\_extended\_vm\_monitoring: false

# this is for custom paginate

:paginate: “[[6, 12, 36, 72], [6, 12, 36, 72]]”

# this display button and clock icon in table of vm

:leases:  
suspend:  
time: “+1209600”  
color: “#000000”  
warning:  
time: “-86400”  
color: “#085aef”  
terminate:  
time: “+1209600”  
color: “#e1ef08”  
warning:  
time: “-86400”  
color: “#ef2808”

# This disable the information sending via URL to Guacamole console

:disable\_guacamole\_info\_header: no

# This change the thresholds of dashboard resource usage

:threshold\_min: 0  
:threshold\_low: 33  
:threshold\_high: 66

#support filesystem  
:support\_fs:  
- ext4  
- ext3  
- ext2  
- xfs

################################################################################

# Check Official support

################################################################################

#:token\_remote\_support:

################################################################################

# OneFlow

################################################################################

# OneFlow endpoint

# 

:oneflow\_server: [http://localhost:2474/](http://localhost:2474/)

################################################################################

# Routes

################################################################################

# Array of files containing ruby code to extend the default sunstone-server

# routes. These files must be placed inside the custom\_routes directory

# in the sunstone root dir (/usr/lib/one/sunstone/routes)

# 

# Example:

# $ ls /usr/lib/one/sunstone/routes

# custom.rb other.rb

# 

# $ cat /usr/lib/one/sunstone/routes/example.rb

# get ‘/custom’ do

# body “It works”

# end

# 

#:routes:

# - custom

# - other

:routes:  
- oneflow  
- vcenter  
- support  
- nsx

################################################################################

# FireEdge

################################################################################

:private\_fireedge\_endpoint: [http://127.0.0.1:2616](http://127.0.0.1:2616)  
:public\_fireedge\_endpoint: [http://exemple.com:2616](http://exemple.com:2616)  
Order deny,allow  
Allow from all

```
</VirtualHost>

```

Can you tell me why nothing is showing in my vmrc console ?  
Thank you