NGINX: Connection gets dropped

[park0kyung0won]

Hello

I am using NGINX on latest version of OPNSense production distro
Problem I've encountered is, seems like connection is being dropped
after certain amount of time.

I was using openstack-dashboard behind the OPNSense NGINX,
which requires websocket for displaying VNC on web.

Should I explicitly set some options for keeping connection alive?

[fabian]

Do you need a timeout option?

[park0kyung0won]

I'm not sure that will fix (I don't have enough knowledge)
I've made some multiplayer web game app which uses websocket
but connection gets dropped after certain amount of time (like 2 mins?...)

I need to dig it down further I guess
For now, not 100% sure it's NGINX problem or firewall itself
Could you give me some advice for inspection? I'll start with wireshark

If it's firewall, I'm suspecting "Schedule States" option (Currently not checked) in
"Firewall" -> "Settings" -> "Advanced" tab...
Can firewall or NGINX somehow wipe active connection(websocket traffic of game) somehow?

[park0kyung0won]

Do you need a timeout option?

I got websocket error code 1006
https://stackoverflow.com/questions/19304157/getting-the-reason-why-websockets-closed-with-close-code-1006

Seems like it's not a firewall issue

[park0kyung0won]

Do you need a timeout option?

I suspect this the most
https://github.com/abingham/runner_repl/issues/7

He says "proxy_read_timeout" and "proxy_send_timeout" should be configured differently than default 60s value

[park0kyung0won]

Do you need a timeout option?

I suspect this the most
https://github.com/abingham/runner_repl/issues/7

He says "proxy_read_timeout" and "proxy_send_timeout" should be configured different from the default value which is 60s

[fabian]

I made a ticket: https://github.com/opnsense/plugins/issues/1210

[park0kyung0won]

I made a ticket: https://github.com/opnsense/plugins/issues/1210

Thank you
Is there any way I can manually override nginx.conf temporarily before update arrives?

[newsense]

Once a patch will be available you'll be able to test it before it's rolled out.

For the time being however, it's still a bug.

[fabian]

For the timeouts, the patch can be installed using the following id: e8a8ed0ad832da64a79abf49ef45118b07267c4a

https://github.com/opnsense/plugins/pull/1211/files

[newsense]

Code Select Expand

opnsense-patch e8a8ed0ad832da64a79abf49ef45118b07267c4a
:)

[park0kyung0won]

For the timeouts, the patch can be installed using the following id: e8a8ed0ad832da64a79abf49ef45118b07267c4a

https://github.com/opnsense/plugins/pull/1211/files

Thanks!!

[park0kyung0won]

Code Select Expand

opnsense-patch e8a8ed0ad832da64a79abf49ef45118b07267c4a
:)

OPNSense says...
fetch: https://github.com/opnsense/core/commit/e8a8ed0ad832da64a79abf49ef45118b07267c4a.patch: Not Found
What should I do?...  :'(

------------------------------------------------------------------
I've figured it out! opensense-patch -c plugins worked

[fabian]

you need to add the switch for the plugins repository (probably -c plugins).