Error: missing Upgrade header - PBS behind traefik

[mstefan]

Hello,

I am trying to get PBS working behind traefik reverse proxy.
At the moment all my services are running behind traefik and i got no problems.
PVE works, pbs webinterface works and 10 other websites are working well.

But trying to make a backup from pve to pbs using the fqdn to get routed through traefik does not work.
I get this error Message:

INFO: Error: missing Upgrade header

I also found these threads but they did not resolve the problem:
https://forum.proxmox.com/threads/does-not-follow-http-standard.128906/
https://forum.proxmox.com/threads/p...ed-missing-upgrade-header.107203/#post-460898

I also read the bug report and startet a lxc container with apache2 to test the config from Max Carrara.
It does not work at all. I get the same error.

Summing up:

• Backup Job from pve to pbs to local ip address with port 8007 --> works
• Backup Job from pve to pbs as pbs.domain.xy with port 443 with traefik as reverse proxy --> not working, missing upgrade header
• Backup Job from pve to pbs as pbs.domain.xy with port 443 with apache2 as reverse proxy -> not working, missing upgrade header

I already tried some different configuration but i got no working result.


Someone got an idea how to fix this issue?

I can use tools like curl etc. but I do not really know, where i have to start at pbs to investigate this.
Maybe someone can support me here?

 

[fabian]

if there already is a bug report, please post your findings there (with the necessary detail, like proxy config & version, exact client commands used for testing, etc.pp.)

 

[ctrlbrk]

I'm joining in with the same problem, but behind Caddy instead of traefik.

(headers) {
header -x-powered-by
header -server
header Content-Security-Policy "frame-ancestors 'self'; upgrade-insecure-requests;"
header X-LB-Server {system.hostname}
header X-LB-Requested-Host {host}
header X-LB-Server {system.hostname}
header X-Forwarded-Port {http.request.port}
header X-Forwarded-For {http.request.header.CF-Connecting-IP}
header X-Real-IP {http.request.header.CF-Connecting-IP}
encode zstd gzip
}

pbs.x.dev, pbs.x.net {
import cloudflare
import headers
reverse_proxy https://192.168.2.58:8007 {
transport http {
tls_insecure_skip_verify
}
}
}

I am on the latest build of PBS. I would greatly appreciate a solution that will work with my architecture using a cloudflare tunnel.

 

[mstefan]

I did not test it again but it should be fixed in the newest version.
See git: https://git.proxmox.com/?p=proxmox-backup.git;a=commit;h=722b7bf7accda97f366a6902a4b1df55e39563cf

Should be in v3.1.2

 

[ctrlbrk]

I did not test it again but it should be fixed in the newest version.
See git: https://git.proxmox.com/?p=proxmox-backup.git;a=commit;h=722b7bf7accda97f366a6902a4b1df55e39563cf

Should be in v3.1.2

I'm running 3.1.2 on both sides and the problem still exists.