52
Views
2
Comments
[ECT Client Connector] Not working in a forced https environment
Question
ect-client-connector
Web icon
Forge asset by OutSystems Lab
We have reconfigured some environments on the firewall level to enforce HTTPS with a 301 redirect...

Since then feedback is not working!  Have tried setting site property to use https as true, have set ect url to https://domain.tld , have tried various options...

Feedbacks still not showing up, any ideas?
2018-05-07 20-49-39
Mário Araújo
Hi there!

If I understand correctly, you are an Entprise Customer, correct? Given the specifics of your request, I believe it may require some troubleshooting.

So, maybe it's best to contact OutSystems Support, they will help. 

Cheers
Mario
2022-05-09 13-46-14
Alexander Popp

I know this is an old post, but I did not see any other answers, so here is something I learned:

I ran into a similar situation after modifying the 'Global' deployment zone's address in Service Center from a deployment controller's IP address to the fully qualified domain name (FQDN) of the load balancer that sits in front of our servers to align with OutSystems best practices.

Since our load balancer employs SSL offloading for incoming requests, we had to configure three additional settings in Service Center:

  • Under Administration -> Security -> Network Security, we had to ensure that Internal Network Addresses included the IP addresses/ranges of the deployment controller, front-ends and monitoring tools. 
  • Also under Administration -> Security -> Network Security, we had to ensure that the IP address(es) of the load balancer were included in the list of Trusted Proxy Addresses.
  • Finally under Administration -> Deployment Zones we had to enable HTTPS for internal communications on our deployment zone settings.

This last bullet was the missing the missing puzzle piece. Our load balancers redirect all HTTP requests to HTTPS requests via a 301 redirect. Unfortunately, if HTTPS for internal connections is not enabled, things like timers and automatic process activities can fail because, from what I can tell, the scheduler service appears to reference the deployment zone address whenever firing off a message to one of the front ends. Moreover, the scheduler does not appear handle 301 responses. 

Therefore, if the deployment zone is something like an IP address whose machine expects an offloaded request, internal HTTPS requests should not be used. This was our original case.

After pointing the deployment zone address to the FQDN of our environment, which hits a load balancer expecting an HTTPS request, we had to enable HTTPS for internal communications on our deployment zone settings to avoid the 301 issue.

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.