# TUNNEL\_ERROR when trying to vnc from browser

**URL:** <https://forum.opennebula.io/t/tunnel-error-when-trying-to-vnc-from-browser/10012>\
**Category:** Installation & Configuration\
**Created:** [October 9, 2021, 11:00am UTC](https://forum.opennebula.io/t/tunnel-error-when-trying-to-vnc-from-browser/10012 "2021-10-09T11:00:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Christoph](https://avatars.discourse-cdn.com/v4/letter/c/eb8c5e/32.png) [@Christoph](https://forum.opennebula.io/u/Christoph)\
**Post date:** [October 9, 2021, 11:00am UTC](https://forum.opennebula.io/t/tunnel-error-when-trying-to-vnc-from-browser/10012/1 "2021-10-09T11:00:53Z")

</div>

Hello,

with fireedge endpoints activated in /etc/one/sunstone-server.conf, when I try to vnc to a VM from webbrowser, I get a message “TUNNEL\_ERROR”. Unfortunately, the error does not appear in sunstone.log, fireedge.{log,error} or novnc.log, so that I cannot get detailed information about what is going wrong. The only unusual thing in my configuration is that I am using lighttpd to proxy the traffic over ssl, and I am quite sure that all required ports are not blocked by a firewall.

The following lines in my fireedge-server.conf define the ip and port to listen on:

host: ‘127.0.0.1’  
port: 2615

These two lines in my sunstone-server.conf define the fireedge endpoints:

:private\_fireedge\_endpoint: [http://localhost:2615](http://localhost:2615)  
:public\_fireedge\_endpoint: [https://www.example.com:2616](https://www.example.com:2616)

lighthttpd proxies request to port 2616 to port 2615.

Any ideas what is wrong?

Regards  
Christoph

---

<div class="post-metadata">

**Author:** ![RedundancyD](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/redundancyd/32/7185_2.png) [@RedundancyD](https://forum.opennebula.io/u/RedundancyD)\
**Post date:** [October 19, 2021, 7:20pm UTC](https://forum.opennebula.io/t/tunnel-error-when-trying-to-vnc-from-browser/10012/2 "2021-10-19T19:20:58Z")

</div>

I am having this issue as well. I am using nginx as a reverse proxy. I can’t seem to find a log entry explaining what the error is having an issue with.

---

<div class="post-metadata">

**Author:** ![RedundancyD](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/redundancyd/32/7185_2.png) [@RedundancyD](https://forum.opennebula.io/u/RedundancyD)\
**Post date:** [October 19, 2021, 9:49pm UTC](https://forum.opennebula.io/t/tunnel-error-when-trying-to-vnc-from-browser/10012/3 "2021-10-19T21:49:25Z")

</div>

Ok looks like the issue is the proxy.

console errors in the web browser lead to a wss error.

The key is to merge into the ngnix conf for /fireedge the guacamole reverse proxy bits from the guacamole documentation

The nginx reverse proxy examples on this forum are for the pre 6 versions that were focused on novnc and didn’t have the guac bits:

```
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
access_log off;
```