Web GUI through port forwarder: only one instance working per browser?

[sdettmer]

Hi,

I setup two ports (lets say 8007 and 8008) on a firewall to be forwarded to two PVE instances on port 8006 each. Each works well and I can access the Web GUI. However, if I try both at the same time in two Firefox or Chrome browser tabs, only one works. It seems as the first one gets logged out when I login in the second. Sometimes I saw an error about a ticket. Is there some issue in the web GUI page code that a connection to the same host just different port somehow shares session data that should not be shared or such?

In case someone else has the issue:
One workaround is to use different browsers, or private/ingocnito mode, or possibly several browser profiles (that should also isolate windows/tabs, but I did not test this).

 

[sterzy]

It seems as the first one gets logged out when I login in the second. Sometimes I saw an error about a ticket. Is there some issue in the web GUI page code that a connection to the same host just different port somehow shares session data that should not be shared or such?

That's probably due to your browser handling the mas the same site. So there will only be one PVEAuthCookie. If you log into the second PVE the cookie will be overwritten and, thus, no longer valid for the first node. A different port alone does not lead to your browser considering the site to be a different one. Not to be confused with the same origin, which follows a different definition. You can read more here: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies#samesite_attribute