Posted on 03-21-2018 02:01 AM
Hi
Has anyone already implemented a load balancer for Jamf Pro with nginx and is willing to share the configuration?
Or which proxy do you use?
Scenarion: 2 Tomcat server in cluster mode with Jamf Pro behind a load balancer which is terminating SSL.
Posted on 04-10-2019 11:03 PM
@anverhousseini did you find anything about this? I'm looking at this as well.
Posted on 04-11-2019 01:06 PM
@prbsparx I'm running several nginx proxies successfully. Do you need any help?
Posted on 04-11-2019 01:44 PM
I'm also interesting in setting up nginx proxies. Can you share your experience and config ?
Posted on 09-17-2019 09:04 PM
I also would be interested in your configuration documentation if you were willing to share.
Posted on 09-19-2019 02:03 AM
This is our config, we are managing the SSL cert with Let's Encrypt:
upstream jamf_backend {
zone tomcat 64k;
ip_hash;
server 192.168.1.10:8080 max_fails=3 fail_timeout=30s;
server 192.168.1.11:8080 max_fails=3 fail_timeout=30s;
}
server {
if ($host = jamf.example.com) {
return 301 https://$host$request_uri;
}
listen 80;
server_name jamf.example.com;
location / {
return 301 https://$server_name$request_uri;
}
}
server {
listen 443 ssl http2 default_server;
server_name jamf.example.com;
ssl_certificate /path/to/cert.pem
ssl_certificate_key /path/to/key.pem
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/nginx/ssl/dhparam.pem;
client_max_body_size 1024M;
send_timeout 300;
location / {
include /etc/nginx/proxy_params;
proxy_connect_timeout 300;
proxy_send_timeout 300;
proxy_read_timeout 90m;
send_timeout 300;
proxy_pass http://jamf_backend/;
proxy_redirect off;
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
}
Posted on 09-14-2020 02:23 PM
@anverhousseini I'm running into an issue with flushing logs specifically where I get 504 Timeouts from the NGINX load balancer.
You mentioned these settings:
proxy_connect_timeout 300; proxy_send_timeout 300; proxy_read_timeout 90m; send_timeout 300;
How did you determine what value to set for each? Was there anything that helped you gauge it better?