NGINX reverse proxy: Firmware > Status, status display non-functional

[Aerowinder]

Greetings,

I am using an NGINX reverse proxy to access OPN - have for many years now, without issue. It's a pretty basic reverse proxy config with TLS active. 26.1 did not present this issue, and 26.7 direct IP access also does not present this issue. This appears to be an issue between NGINX 1.30 and lighttpd 1.4.85. Just wanted to report this in case others run into it.

Reproduction: On 26.7 final, using reverse proxy, navigate to System > Firmware > Status.

Observation: Status spinny-wheel never goes away. Table does not populate.

WebgGUI log: 2026-07-15T10:51:34-04:00     Error     lighttpd     (/usr/obj/usr/ports/www/lighttpd/work/lighttpd-1.4.85/src/mod_openssl.c.5005) SSL: addr:192.168.20.10 ssl_err:5 ret:-1 errno:35: Resource temporarily unavailable
That IP is my reverse proxy.

Firefox log: NS_ERROR_NET_PARTIAL_TRANSFER


The response appears to terminate early at 65,112 characters, causing the error. NGINX has an adequate client_body_size (100M).

The Settings page within the Firmware section seems to work fine. Update check itself works fine, but the tabs (except Settings) are broken - they produce no data under the tab. Has anyone else seen this on 26.7 final with a reverse proxy? Anyone else using NGINX have a working setup?

[franco]

perhaps also related to ktls: https://github.com/opnsense/ports/issues/275

[dw]

Seconded. Was working fine before 26.7 but now several Web GUI pages don't load completely.
For example the firewall/live view keeps loading with the spinner and the main lobby/dashboard shows nothing apart from the menu on the left.

Same errors in the Web GUI log:

 (/usr/obj/usr/ports/www/lighttpd/work/lighttpd-1.4.85/src/mod_openssl.c.5005) SSL: addr:192.168.0.108 ssl_err:5 ret:-1 errno:35: Resource temporarily unavailable
(192.168.0.108 is the NGINX proxy.)

Everything works fine when accessing the Web GUI directly.

[Aerowinder]

perhaps also related to ktls: https://github.com/opnsense/ports/issues/275

Thanks for the response. I took a look at this, but I'm not sure what to make of it. The people in that GitHub issue very clearly know way more about this stuff than I do.

Seconded. Was working fine before 26.7 but now several Web GUI pages don't load completely.
For example the firewall/live view keeps loading with the spinner and the main lobby/dashboard shows nothing apart from the menu on the left.

Same errors in the Web GUI log:

 (/usr/obj/usr/ports/www/lighttpd/work/lighttpd-1.4.85/src/mod_openssl.c.5005) SSL: addr:192.168.0.108 ssl_err:5 ret:-1 errno:35: Resource temporarily unavailable
(192.168.0.108 is the NGINX proxy.)

Everything works fine when accessing the Web GUI directly.

My main page also fails to load occasionally. I assumed it was weirdness most likely due to caching and my playing with my reverse proxy config trying to find a solution, but now I realize that it was probably the same problem showing up somewhere else. I did not confirm with the logs when it was happening to me.

[mrpink]

Code Select Expand

# sysctl kern.ipc.tls.enable=0
# configctl webgui restart

That worked for me with haproxy, just give it a try.

[dw]

Thanks! That seems to restore most of the functionality with NGINX as well.
On the Dashboard the CPU and Traffic Graphs remain empty though and Firewall says 'Waiting for Data'.
Firewall/Log Files/Live View works now. System/Firmware/Status as well.

[Aerowinder]

Code Select Expand

# sysctl kern.ipc.tls.enable=0
# configctl webgui restart

That worked for me with haproxy, just give it a try.

This fixes it for me, too. Thanks!

CPU, traffic, and firewall log graphs all functional on the dashboard. Status update working.

[dw]

After turning on HTTP/2 Support in NGINX for the OPNsense Proxy host my Dashboard is fully functioning again.
I am pretty sure I had this on before 26.7 as well but I might have turned it off in trying to get 26.7 to work.