[Solved] New router hangs Guacamole

smaugain 2023-09-04 15:39:59 UTC #1

Hi,
Since we switched to fiber, Guacamole has stopped working.
When I compare with the old OpenID logs, the part of the exchanges “openid.DEBUG: GET /egroupware/openid/endpoint.php/jwks HTTP/1.1” is missing.
I don’t see what difference there could be between the old xDSL router and the new one.

The addressing of the host server is fixed IP and has not changed.
The LAN address of the router is the same.
The WEB server certificate is still valid.
Temporarily switching back to the old router corrects the problem.

The only difference I can see is that the old router could handle local DNS and the new one couldn’t. So I had to install Dnsmask on the server to name the local machines.
Turning off Dnsmask does not solve the problem.
I can post the OpenID logs, if you wish.

I must be missing something, can you help me?
Thank you in advance.

IMAGE                                COMMAND                  CREATED        STATUS                   PORTS                      NAMES
guacamole/guacamole:1.5.1            "/opt/guacamole/bin/…"   7 days ago     Up 7 minutes             127.0.0.1:8888->8080/tcp   guacamole
guacamole/guacd:1.5.1                "/bin/sh -c '/opt/gu…"   7 days ago     Up 7 minutes (healthy)   4822/tcp                   guacamole-guacd
egroupware/egroupware:23.1           "/entrypoint.sh php-…"   9 days ago     Up 7 minutes             9000/tcp                   egroupware
nginx:stable-alpine                  "/docker-entrypoint.…"   3 weeks ago    Up 7 minutes             127.0.0.1:8080->80/tcp     egroupware-nginx
phpswoole/swoole:5.0-php8.1-alpine   "docker-php-entrypoi…"   4 months ago   Up 7 minutes                                            egroupware-push
containrrr/watchtower                "/watchtower --sched…"   5 months ago   Up 7 minutes             8080/tcp                   egroupware-watchtower

StefanU 2023-09-04 18:03:10 UTC #2

Hi Silvère.

Have you been in
/etc/egroupware-guacamole/docker-compose.override.yml

entered an extra_host?

# set the ip-address of docker0 interface or your docker host AND your official DNS name so Guacamole
# can access EGroupware without the need to go over your firewall
extra_hosts:
- "sub.domain.tld:172.17.0.1"

Have you been in
/etc/egroupware-docker/docker-compose.override.yml

entered an extra_host?

Stefan

smaugain 2023-09-07 06:17:40 UTC #3

Hi,
Thanks, that’s the solution, I uncommented the “extra_host” option and Guacamole works again. On the other hand, I don’t remember having needed to use it before and the correct domain was already indicated in the file. Maybe through the installation script?
I don’t understand how this option can influence changing the router?
Sil

RalfBecker 2023-09-07 07:13:53 UTC #4

Your new router blocks accessing the external URL from the internal interface, when EGroupware and Guacamole talk to each other on server-side.

With the extra_host, they no longer go through the router, but talk directly to each other.

Ralf