• 2 Posts
  • 10 Comments
Joined 1 year ago
cake
Cake day: July 31st, 2023

help-circle


  • From traefik’s access.log:

    {"ClientAddr":"192.168.1.17:45930","ClientHost":"192.168.1.17","ClientPort":"45930","ClientUsername":"-","DownstreamContentSize":21,"DownstreamStatus":500,"Duration":13526669,"OriginContentSize":21,"OriginDuration":13462593,"OriginStatus":500,"Overhead":64076,"RequestAddr":"whoami.mydomain.com","RequestContentSize":0,"RequestCount":16032,"RequestHost":"whoami.mydomain.com","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"websecure-whoami-vpn@file","ServiceAddr":"10.13.16.1","ServiceName":"whoami-vpn@file","ServiceURL":{"Scheme":"https","Opaque":"","User":null,"Host":"10.13.16.1","Path":"","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""},"StartLocal":"2024-04-30T00:21:51.533176765Z","StartUTC":"2024-04-30T00:21:51.533176765Z","TLSCipher":"TLS_CHACHA20_POLY1305_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2024-04-30T00:21:51Z"}
    {"ClientAddr":"192.168.1.17:45930","ClientHost":"192.168.1.17","ClientPort":"45930","ClientUsername":"-","DownstreamContentSize":21,"DownstreamStatus":500,"Duration":13754666,"OriginContentSize":21,"OriginDuration":13696179,"OriginStatus":500,"Overhead":58487,"RequestAddr":"whoami.mydomain.com","RequestContentSize":0,"RequestCount":16033,"RequestHost":"whoami.mydomain.com","RequestMethod":"GET","RequestPath":"/favicon.ico","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"websecure-whoami-vpn@file","ServiceAddr":"10.13.16.1","ServiceName":"whoami-vpn@file","ServiceURL":{"Scheme":"https","Opaque":"","User":null,"Host":"10.13.16.1","Path":"","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""},"StartLocal":"2024-04-30T00:21:51.74274202Z","StartUTC":"2024-04-30T00:21:51.74274202Z","TLSCipher":"TLS_CHACHA20_POLY1305_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2024-04-30T00:21:51Z"}
    

    All I can tell from this is that there is a DownstreatStatus of 500. I don’t know what that means.




  • Thanks so much for helping me troubleshoot this, @lemmyvore@feddit.nl!

    Is the browser also using the LAN router for DNS? Some browsers are set to use DoT or DoH for DNS, which would mean they’d bypass your router DNS.

    My browser was using DoH, but I turned it off and still have the same issue.

    Do you also get “Internal Server Error” if you make the request with curl on the CLI on the laptop?

    Yes, running curl -L -k --header 'Host: whoami.mydomain.com' 192.168.1.51 on the laptop results in “Internal Server Error”.

    How did you check that mydomain is being resolved correctly on the laptop?

    ping whoami.mydomain.com hits 192.168.1.51.

    What do you get with curl from the other VM, or from the router, or from the host machine of the VM?

    From the router:

    Shell Output - curl -L -k --header 'Host: whoami.mydomain.com' 192.168.1.51
      % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                     Dload  Upload   Total   Spent    Left  Speed
    
      0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0-
    100    17  100    17    0     0   8200      0 --:--:-- --:--:-- --:--:-- 17000
    
    100    21  100    21    0     0    649      0 --:--:-- --:--:-- --:--:--   649
    Internal Server Error
    

    From the wireguard client container on the “client” VM:

    curl -L -k --header 'Host: whoami.mydomain.com' 192.168.1.51
    Internal Server Error
    

    From the traefik container on the “client” VM:

    $ curl -L -k --header 'Host: whoami.mydomain.com' 192.168.1.51
    Internal Server Error
    

    From the “client” VM itself:

    # curl -L -k --header 'Host: whoami.mydomain.com' 192.168.1.51
    Internal Server Error
    

    From the wireguard container on the “server” VM:

    # curl -L -k --header 'Host: whoami.mydomain.com' 192.168.1.51
    Internal Server Error
    

    From the traefik container on the “server” VM (This is interesting. Why can’t I ping from this traefik installation but a can from the other? But even though it won’t ping, it did resolve to the correct IP):

    $ ping whoami.mydomain.com
    PING whoami.mydomain.com (192.168.1.51): 56 data bytes
    ping: permission denied (are you root?)
    

    From the “server” VM itself:

    # curl -L -k --header 'Host: whoami.mydomain.com' 192.168.1.51
    Internal Server Error
    

  • Thanks for helping, @lemmyvore@feddit.nl.

    I’m browsing from my laptop on the same network as promox: 192.168.1.0/24

    The tunnel is relevant in that my ultimate goal will be to have “client” in the cloud so I can access my apps from the world while having all traffic into my house be through a VPN.

    The VM’s IPs are 192.168.1.50 (“server”) and 192.168.1.51 (“client”). They can see everything on their subnet and everything on their subnet can see them.

    Everything is using my router for DNS, and my router points myapp.mydomain.com and whoami.mydomain.com to “client”. And by “everything” I mean all computers on the subnet and all containers in this project.

    Both VMs and my laptop resolve myapp.mydomain.com and whoami.mydomain.com to 192.168.1.51, which is “client”, and can ping it.