[K8S] Ingress reverse proxy don't work in apps but works by browser

[CyberPoison 33]

Hi everyone, 

I have started a Ingress LoadBalancer as Reverse Proxy but in apps i have many issues with it the apps don't works this is my ingress.yml 

 

Quote

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    ingress.kubernetes.io/ssl-redirect: '"false"'
    nginx.ingress.kubernetes.io/ssl-redirect: '"false"'
  creationTimestamp: "2020-10-29T08:46:51Z"
  generation: 2
  labels:
    cattle.io/creator: norman
  name: emby
  namespace: emby
  resourceVersion: "73335059"
  selfLink: /apis/extensions/v1beta1/namespaces/emby/ingresses/emby
  uid: 
spec:
  rules:
  - host: certification
    http:
      paths:
      - backend:
          serviceName: ingress-6c37xxxxxxxxxxxxxxxxxxxxxx
          servicePort: 8096
  tls:
  - secretName: certification
status:
  loadBalancer:
    ingress:
    - ip: external.ip

The right question is how can i set up the SSL used by the CertManger Catalog APP since it generate already the certificate, does it need to be implemented any certificate on the emby or i can use the cert manager to generate my certificate and use it to chifer the data to the apps ? 

I also have tried to allow HTTP connections but my ingress redirect it everytime to https://host.com/web/..... but i would like to use the ssl is my best option for it.

I also tried with the anotation "force-ssl-redirect = "false" " it doens't worked btw

EDIT Half part as been fixed re-installing the app btw the playback don't work through the emby it self only with external players

Edited October 30, 2020 by CyberPoison

[Carlo 4560]

Hi, I think you're going to need to provide more information on what you're trying to do and what actual software you are using.

[CyberPoison 33]

I'm trying to reverse 8096 or 8920 to a https request through the ingress controller on k8s btw the ingress controller already provide a ssl certificate so I want to use it but when I use it my apps don't work (No able to perform acess to the server) only when I remove the tls/ssl certificate it works. 

 

My question is how to allow secure connections to the emby through the ingress controller as reverse proxy and what is the right configuration for it

[Carlo 4560]

Do you have "Secure connection mode:" in the network page set to use "Handled by reverse proxy".

[CyberPoison 33]

Yes I tried with this but the port 8290 still not responding and when i use the option "Handled by Reverse Proxy" it doesn't make any effect ( the app still not loading the server /or can't log to the server or when i was able to log it doesn't load movies or TV shows it still appearing the spinning circle and never starts the movie

 

It only works thought the external player like mpv or exoplayer but native (As a app installed) by the emby player it doesn't work or don't load the content 

Edited October 30, 2020 by CyberPoison

[CyberPoison 33]

With exoplayer (No sound or subtitles) 

With VLC (OK) 

With emby ( Just won't load nothing) 

LG WebOS (Works through the https) 

BTW the way my config is (Handled by Reverse Proxy) and I use ingress controller as reverse proxy to port 8096 because the 8290 won't work

Edited October 30, 2020 by CyberPoison

[CyberPoison 33]

As you can see the emby app still spinning so the player doesn't start

But on the external player (VLC) it works nice not sure if this is a issue with the server side config but if you have any suggestions to fix this across all platforms it will be nice 

 

 

[Carlo 4560]

You seem to be mixing topics.  Forget about playback if you haven't connected.  Why do you need a proxy for local connections or even SSL?

[CyberPoison 33]

I'm using GCE as server so i would like to connect by ssl 

BTW the playback issue is in a part related with the http(s) because on http it works and I'm not sure if anyone get the same issue about the playback 

 

Today i re-installed the app emby and i was able to login through https but not able to play with emby. So according to the title of the topic the issue about playing in apps still valid. 

 

EDIT: I was able to connect by ssl but not able to reproduce content only by external player as I showed above in screenshot. 

Edited October 30, 2020 by CyberPoison

[Carlo 4560]

Just curious, but isn't that an expensive way to run an Emby Server?

Have you tried it via SSL without the proxy server involved just to make sure that works correctly?

[CyberPoison 33]

It's a little vm im using my credits not something expensive I just run something around 60$/month 

 

Without ssl it works through the proxy ingress and it works by the ip (no ssl) it works everytime only by ssl it doesn't playback the content 

[Carlo 4560]

Do you have a cert setup properly in Emby or the Reverse Proxy in order to get an SSL connection?