Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Thanks for these answers guys, very helpful!

I'd just like to add that if your novncproxy is fronted by HAProxy, you may also need to modify the corresponding haproxy config to make sure the encrypted traffic is passed through to the eventual nova-novncproxy process that handles it. In my case (OpenStack Kilo deployed by Mirantis Fuel 7.0), it was simply a case of replacing option httplog with:

mode tcp
option tcplog

in /etc/haproxy/conf.d/170-nova-novncproxy.cfg on all controllers. Finally bounce HAProxy with: crm resource restart p_haproxy.

(more info on SSL traffic handling with haproxy: https://serversforhackers.com/using-ssl-certificates-with-haproxy)