proxmox web gui - from vmbr1 internal IP - blank page

[albans]

Hi,

I'm using Proxmox 4.4-1.

I've closed the access to the web gui through the public IP of my proxmox server via a firewall rule.
Then I added a vmbr1 with a internal IP network (10.2.2.0/24).
I access this network via OpenVPN (specific network 172.26.230.0/20).
The firewall rules are setup to authorize any INPUT traffic between both of those networks.

It works perfectly for SSH through the OpenVPN connection (cannot reach it through the public IP of the proxmox host, but can reach it through the internal IP - 10.2.2.1). Containers on this internal network can also ping each other and connect to Internet (using masquerade).

But when I try to reach the Proxmox web gui on IP https://10.2.2.1:8006 (instead of the public IP), I get a blank page. Even do I can see some access logs in /var/log/pveproxy/access.log:

172.26.232.2 - - [29/Apr/2017:12:04:19 +0200] "GET / HTTP/1.1" 200 682
172.26.232.2 - - [29/Apr/2017:12:04:19 +0200] "GET /pve2/ext6/theme-crisp/resources/theme-crisp-all.css HTTP/1.1" 200 68
172.26.232.2 - - [29/Apr/2017:12:04:19 +0200] "GET /pve2/ext6/crisp/resources/charts-all.css HTTP/1.1" 200 995
172.26.232.2 - - [29/Apr/2017:12:04:20 +0200] "GET /pve2/css/ext6-pve.css HTTP/1.1" 200 2417
172.26.232.2 - - [29/Apr/2017:12:04:21 +0200] "GET /pve2/ext6/theme-crisp/resources/theme-crisp-all_1.css HTTP/1.1" 200 33744
172.26.232.2 - - [29/Apr/2017:12:04:22 +0200] "GET /pve2/css/font-awesome.css HTTP/1.1" 200 6447
172.26.232.2 - - [29/Apr/2017:12:04:22 +0200] "GET /pve2/ext6/theme-crisp/resources/theme-crisp-all_2.css HTTP/1.1" 200 5208
172.26.232.2 - - [29/Apr/2017:12:04:22 +0200] "GET /pve2/ext6/ext-all.js HTTP/1.1" 200 609692
172.26.232.2 - - [29/Apr/2017:12:04:23 +0200] "GET /pve2/ext6/charts.js HTTP/1.1" 200 100383
172.26.232.2 - - [29/Apr/2017:12:04:23 +0200] "GET /pve2/ext6/pvemanagerlib.js HTTP/1.1" 200 158908
172.26.232.2 - - [29/Apr/2017:12:04:24 +0200] "GET /pve2/ext6/locale/locale-en.js HTTP/1.1" 200 256

Therefore, what's the issue here? As from a network point of view, it seems all is good - but I keep getting a blank page when accessing the web gui through the internal IP. Also, this used to work well with Proxmox 3.

Thanks for your help.

 

[albans]

Re-opened topic - again getting a blank page after a couple of reboots

 

[albans]

Have a workaround so far:
- created a script checking the openvpn log
- each time a connection from a client ip is successful, it adds the client public IP to an ipset with a timeout
- this timeout is used on a iptables rule that allow connection to the web gui tcp 8006 via the public host ip
This way, only the client public IPs that gets connected through openvpn can access the web gui on the host public IP. Without the need of opening the port 8006 to any IP, and without the need of using vmbr1 to access the web gui. It works well!