Problem with Web Gui from specific PC

[BillyElliot]

Hi there, i hope this is the correct thread to post this in, im new here.

So: my Proxmox install on debian is running for like 6 months without problems. Now, all of the sudden, im not able to connect to the web Gui anymore, but just not from my PC. From my Ipad e.g. it still works fine. And yes, i am using https and port 8006. When i run "pveproxy start -debug=1" and look at what happens when i try to connect via PC i always get this:

"worker[16010]: PVE::APIServer::AnyEvent +1691: (eval): ACCEPT FH11 CONN2
worker[16010]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: close connection AnyEvent::Handle=HASH(0x55d4bf7247f0)
worker[16010]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: CLOSE FH10 CONN1
worker[16010]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: close connection AnyEvent::Handle=HASH(0x55d4c00ed888)
worker[16010]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: CLOSE FH11 CONN0
worker[16010]: PVE::APIServer::AnyEvent +1691: (eval): ACCEPT FH10 CONN1
worker[16010]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: close connection AnyEvent::Handle=HASH(0x55d4bf7356d0)
worker[16010]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: CLOSE FH10 CONN0
worker[16009]: PVE::APIServer::AnyEvent +1691: (eval): ACCEPT FH10 CONN1
worker[16009]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: close connection AnyEvent::Handle=HASH(0x55d4bf7247f0)
worker[16009]: PVE::APIServer::AnyEvent +1741: client_do_disconnect: CLOSE FH10 CONN0"

This is the same output i would get, if i were to connect via ipad and then close the connection manually by exiting the website / logging of.
So it definetly is a client side problem, i guess? It is browser indipendent, as far as i can tell.

Any input is greatly appreciated, have a nice day and thank you in advance for reading and replying!

BillyElliot

 

[Dunuin]

CTRL+F5 in browser to drop caches doesn't help? Maybe some changes to the clients firewall?

 

[BillyElliot]

Wow, thank you for your fast reply, but sadly, CTRL F5 does not help. The only firewall I configured manually is my rounters one, but since both my ipad and my pc are in same subnet, the router Firewall should not be the issue. When deactivating win-defender it does not help and the firewall rules in win-defender also dont include any rules concerning the ip adress in question.
Again, thank you very much for you answer and help!

BillyElliot

 

[jabbas]

I just upgraded to the latest version and it started happening for me also.

Can't get to the GUI via Chrome or curl from my desktop pc (macmini), but getting to it via curl from proxmox machine works.

For me it smells like some depracated TLS stuff that is still used by pveproxy but Chrome/curl/macos stopped support it.

From desktop pc:

jabbas@mini ~ % curl -v -k https://pve.home:8006
*   Trying 10.1.255.253:8006...
* Connected to pve.home (10.1.255.253) port 8006 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/cert.pem
*  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* LibreSSL SSL_connect: Connection reset by peer in connection to pve.home:8006 
* Closing connection 0
curl: (35) LibreSSL SSL_connect: Connection reset by peer in connection to pve.home:8006

pveproxy -debug while running from the desktop

pve /etc % pveproxy start -debug
worker[452607]: PVE::APIServer::AnyEvent +1705: (eval): ACCEPT FH10 CONN1
worker[452607]: PVE::APIServer::AnyEvent +1755: client_do_disconnect: close connection AnyEvent::Handle=HASH(0x5606bbe7df20)
worker[452607]: PVE::APIServer::AnyEvent +1755: client_do_disconnect: CLOSE FH10 CONN0

From proxmox machine itself:

pve ~ % curl -v -k https://pve.home:8006
*   Trying 10.1.255.253:8006...
* Connected to pve.home (10.1.255.253) port 8006 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
*  subject: C=PL; ST=Malopolska; L=Krakow; O=Jabbas; emailAddress=jabbas@jabbas.eu; CN=pve.home; subjectAltName=DNS:pve.home,DNS:proxmox.home
*  start date: Jan 10 09:58:15 2021 GMT
*  expire date: Apr 15 09:58:15 2023 GMT
*  issuer: C=PL; ST=Malopolska; L=Krakow; O=Jabbas; emailAddress=jabbas@jabbas.eu; CN=jabbas-internal-ca
*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
> GET / HTTP/1.1
> Host: pve.home:8006
> User-Agent: curl/7.74.0
> Accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Cache-Control: max-age=0
< Connection: Keep-Alive
< Date: Mon, 07 Feb 2022 21:02:21 GMT
< Pragma: no-cache
< Server: pve-api-daemon/3.0
< Content-Length: 2226
< Content-Type: text/html; charset=utf-8
< Expires: Mon, 07 Feb 2022 21:02:21 GMT
< 
<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
    <title>pve - Proxmox Virtual Environment</title>
    <link rel="icon" sizes="128x128" href="/pve2/images/logo-128.png" />
    <link rel="apple-touch-icon" sizes="128x128" href="/pve2/images/logo-128.png" />
    <link rel="stylesheet" type="text/css" href="/pve2/ext6/theme-crisp/resources/theme-crisp-all.css?ver=7.0.0" />
    <link rel="stylesheet" type="text/css" href="/pve2/ext6/crisp/resources/charts-all.css?ver=7.0.0" />
    <link rel="stylesheet" type="text/css" href="/pve2/fa/css/font-awesome.css" />
    <link rel="stylesheet" type="text/css" href="/pve2/css/ext6-pve.css?ver=7.1-10" />
    <link rel="stylesheet" type="text/css" href="/pwt/css/ext6-pmx.css?ver=3.4-5" />
    
    <script type='text/javascript'>function gettext(buf) { return buf; }</script>
    
    <script type="text/javascript" src="/pve2/ext6/ext-all-debug.js?ver=7.0.0"></script>
    <script type="text/javascript" src="/pve2/ext6/charts-debug.js?ver=7.0.0"></script>
    <script type="text/javascript" src="/pve2/js/u2f-api.js"></script>
    <script type="text/javascript" src="/qrcode.min.js"></script>
    <script type="text/javascript">
    Proxmox = {
    Setup: { auth_cookie_name: 'PVEAuthCookie' },
    defaultLang: 'en',
    NodeName: 'pve',
    UserName: '',
    CSRFPreventionToken: 'null'
    };
    </script>
    <script type="text/javascript" src="/proxmoxlib.js?ver=3.4-5"></script>
    <script type="text/javascript" src="/pve2/js/pvemanagerlib.js?ver=7.1-10"></script>
    <script type="text/javascript" src="/pve2/ext6/locale/locale-en.js?ver=7.0.0"></script>

    <script type="text/javascript">
    if (typeof(PVE) === 'undefined') PVE = {};
    Ext.History.fieldid = 'x-history-field';
    Ext.onReady(function() { Ext.create('PVE.StdWorkspace');});
    </script>

  </head>
  <body>
    <!-- Fields required for history management -->
    <form id="history-form" class="x-hidden">
    <input type="hidden" id="x-history-field"/>
    </form>
  </body>
</html>
* Connection #0 to host pve.home left intact
pve ~ %

pve /etc % pveversion --verbose
proxmox-ve: 7.1-1 (running kernel: 5.13.19-4-pve)
pve-manager: 7.1-10 (running version: 7.1-10/6ddebafe)
pve-kernel-helper: 7.1-10
pve-kernel-5.13: 7.1-7
pve-kernel-5.13.19-4-pve: 5.13.19-8
pve-kernel-5.13.19-3-pve: 5.13.19-7
ceph-fuse: 14.2.21-1
corosync: 3.1.5-pve2
criu: 3.15-1+pve-1
glusterfs-client: 9.2-1
ifupdown: residual config
ifupdown2: 3.1.0-1+pmx3
ksm-control-daemon: 1.4-1
libjs-extjs: 7.0.0-1
libknet1: 1.22-pve2
libproxmox-acme-perl: 1.4.1
libproxmox-backup-qemu0: 1.2.0-1
libpve-access-control: 7.1-6
libpve-apiclient-perl: 3.2-1
libpve-common-perl: 7.1-2
libpve-guest-common-perl: 4.0-3
libpve-http-server-perl: 4.1-1
libpve-storage-perl: 7.0-15
libqb0: 1.0.5-1
libspice-server1: 0.14.3-2.1
lvm2: 2.03.11-2.1
lxc-pve: 4.0.11-1
lxcfs: 4.0.11-pve1
novnc-pve: 1.3.0-1
proxmox-backup-client: 2.1.5-1
proxmox-backup-file-restore: 2.1.5-1
proxmox-mini-journalreader: 1.3-1
proxmox-widget-toolkit: 3.4-5
pve-cluster: 7.1-3
pve-container: 4.1-3
pve-docs: 7.1-2
pve-edk2-firmware: 3.20210831-2
pve-firewall: 4.2-5
pve-firmware: 3.3-5
pve-ha-manager: 3.3-3
pve-i18n: 2.6-2
pve-qemu-kvm: 6.1.1-1
pve-xtermjs: 4.16.0-1
pve-zsync: 2.2.1
qemu-server: 7.1-4
smartmontools: 7.2-pve2
spiceterm: 3.2-2
swtpm: 0.7.0~rc1+2
vncterm: 1.7-1
zfsutils-linux: 2.1.2-pve1

 

[jabbas]

Disabling Jumbo Frames on my macmini eth interface "fixed" the issue.

 

[BillyElliot]

Disabling Jumbo Frames on my macmini eth interface "fixed" the issue.

Wow! Thank you so much! I had forgotten about me messing around with jumbo frames some time ago. This instantly fixed my issue!
Thank you again and have a great day!
BillyElliot