# Revision history [back]

Thanks for these answers guys, very helpful!

I'd just like to add that if your novncproxy is fronted by HAProxy, you may also need to modify the corresponding haproxy config to make sure the encrypted traffic is passed through to the eventual nova-novncproxy process that handles it. In my case (OpenStack Kilo deployed by Mirantis Fuel 7.0), it was simply a case of replacing option httplog with:

mode tcp
option tcplog


in /etc/haproxy/conf.d/170-nova-novncproxy.cfg on all controllers. Finally bounce HAProxy with: crm resource restart p_haproxy.

(more info on SSL traffic handling with haproxy: https://serversforhackers.com/using-ssl-certificates-with-haproxy)