Secure WebGui

[Thomas Sossna]

Hello Community,

we have a cluster in a local network(10.1.20.0/24) and a nginx reverseproxy to reach the novnc.
Now we want to have a bit more security, our system creates a token based login and starts the novnc popup. If the user enters the reverse-address in the browser the full gui is shown(for sure he cannot do anything because of his permissions) but we would like that the user sees nothing so he can only use the novnc-console. Do you know a trick? I already tried something with proxy rules but i dont have a good idea...

Would be great to hear some hints

 

[dcsapak]

you can try to filter all requests in the proxy and there only allow requests with "?console" or "/api2/" in the url
this should prevent accessing the webinterface but stillt to the console