OPNsense Forum

English Forums => Tutorials and FAQs => Topic started by: Inxsible on February 03, 2022, 02:38:05 am

Title: Routing iKVM/VNC traffic over HAProxy plugin in Opnsense
Post by: Inxsible on February 03, 2022, 02:38:05 am

Hi all,

I have the haproxy plugin installed on Opnsense and it is used for SSL-offloading. I also have 2 Supermicro boards with IPMI that I proxy via haproxy. Everything works EXCEPT iKVM. Both Java based and HTML5 based. Each time I use the proxied address, the iKVM fails with connection errors. HTML5 based gives "Server disconnected (code 1006)" and the Java KVM fails with "Connect failed".

Now if I use the IP address of the IPMI BMC with either HTTP or HTTPS, the iKVM works. That would mean that the iKVM traffic is somehow lost via the haproxy. From the IPMI BMC documentation (https://www.supermicro.com/manuals/other/IPMI_Users_Guide.pdf) (see page 155) it seems that Supermicro uses port 5900 for the KVM traffic. How would I set up the Rules & Conditions so that once I connect to the IPMI using the proxied address the iKVM would work as well?

Has anyone done this before maybe for Dell iDRAC or HP iLo, if not for Supermicro?

Thanks,

Title: Re: Routing iKVM/VNC traffic over HAProxy plugin in Opnsense
Post by: bucky2780 on March 02, 2024, 06:19:02 am

i have this problem too... still wondering how to overcome this.

Title: Re: Routing iKVM/VNC traffic over HAProxy plugin in Opnsense
Post by: cookiemonster on March 02, 2024, 11:24:23 pm

According to the document, the connection is TCP for all but one type. In haproxy when terminating ssl the connection type is http/https. So my guess is that it needs a tcp frontend-backend setup.