option http-server-close
option httpclose
reqadd X-Forwarded-Proto:\ https
default_backend jupyter_ssl_backend
backend jupyter_ssl_backend
mode http
balance source
server server4 192.168.0.31:7800
frontend urika-app-magmt_ssl
bind *:29203 ssl crt /etc/ssl/certs/filename.pem
mode http
option forwardfor
option http-server-close
option httpclose
reqadd X-Forwarded-Proto:\ https
reqadd X-Forwarded-Protocol:\ https
default_backend urika-app-magmt_ssl_backend
backend urika-app-magmt_ssl_backend
mode http
balance source
server server1 192.168.0.31:8000
In the above file,
192.168.0.31
is the IP address of the node where HUE is running. 8888 is the port where
HUE is running. If SSL is enabled, the HUE UI would be available at
https://
hostname
-login1:29202
.
HUE would still be available at
http://
hostname
-login1:8888
, but this URL not secure. It is
recommended to use
https://
hostname
-login1:29202
.
The preceding example is specific to a 48 node system. The IP address should be used according to the
system configuration. The following list of IP addresses can be used as a reference:
hive_ssl_backend
16 node: 192.168.0.3
32 node: 192.168.0.9
48 node: 192.168.0.33
sparkthrift_ssl_backend
16 node: 192.168.0.1
32 node: 192.168.0.9
48 node: 192.168.0.33
grafana_ssl_backend
16 node: 192.168.0.15
32 node: 192.168.0.31
48 node: 192.168.0.47
hue_ssl_backend
16 node: 192.168.0.7
32 node: 192.168.0.15
48 node: 192.168.0.31
jupyter_ssl_backend
16 node: 192.168.0.7
32 node: 192.168.0.15
48 node: 192.168.0.31
csms_ssl_backend
urika-app-mgmt_ssl_backend
16 node: 192.168.0.7
32 node: 192.168.0.15
48 node: 192.168.0.31
Security
S3016
232
