mirror of
https://github.com/juanfont/headscale.git
synced 2024-12-02 03:33:05 +00:00
Warn when Headscale is running behind a wrongly configured proxy
This commit is contained in:
parent
7c49c752a9
commit
2262188d8a
1 changed files with 13 additions and 0 deletions
13
noise.go
13
noise.go
|
@ -23,6 +23,19 @@ func (h *Headscale) NoiseUpgradeHandler(
|
||||||
) {
|
) {
|
||||||
log.Trace().Caller().Msgf("Noise upgrade handler for client %s", req.RemoteAddr)
|
log.Trace().Caller().Msgf("Noise upgrade handler for client %s", req.RemoteAddr)
|
||||||
|
|
||||||
|
upgrade := req.Header.Get("Upgrade")
|
||||||
|
if upgrade == "" {
|
||||||
|
// This probably means that the user is running Headscale behind an
|
||||||
|
// improperly configured reverse proxy. TS2021 requires WebSockets to
|
||||||
|
// be passed to Headscale. Let's give them a hint.
|
||||||
|
log.Warn().
|
||||||
|
Caller().
|
||||||
|
Msg("No Upgrade header found in TS2021 request. If running headscale behind a reverse proxy, make sure it is configured to pass WebSockets through.")
|
||||||
|
http.Error(writer, "Internal error", http.StatusInternalServerError)
|
||||||
|
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
noiseConn, err := controlhttp.AcceptHTTP(req.Context(), writer, req, *h.noisePrivateKey)
|
noiseConn, err := controlhttp.AcceptHTTP(req.Context(), writer, req, *h.noisePrivateKey)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
log.Error().Err(err).Msg("noise upgrade failed")
|
log.Error().Err(err).Msg("noise upgrade failed")
|
||||||
|
|
Loading…
Reference in a new issue