Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-10611

CLI doesn't work if the firewall is activated on the server

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • cli
    • None

      Hi,

      I'm using Jenkins 1.425-SNAPSHOT deployed like this :

      • OS : Ubuntu 11.04
      • AppServer : Apache Tomcat 6.0.32
      • Reverse Proxy : Apache HTTPd with mod-proxy-httpd
        Jenkins is exposed only using https on the apache side.
        The reverse proxy has this sort of config :
            ProxyRequests           Off
            ProxyPreserveHost       On
            ProxyPass               /       http://localhost:20020/ acquire=1000 retry=30
            ProxyPassReverse        /       http://localhost:20020/
            <Proxy *>
                Order deny,allow
                Allow from all
            </Proxy>
        

        I cannot use the Jenkins CLI if the firewall is activated and I receive a Connection Timeout Error.
        Jenkins probably opens a communication port (JNPL ?) that the CLI cannot use.

          [JENKINS-10611] CLI doesn't work if the firewall is activated on the server

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          cli/src/main/java/hudson/cli/CLI.java
          http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0
          Log:
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't
          work.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html cli/src/main/java/hudson/cli/CLI.java http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0 Log: [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't work.

          dogfood added a comment -

          Integrated in jenkins_main_trunk #1036
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't

          Kohsuke Kawaguchi : 5f756c61706911f8db10897956657c7a2e50eda0
          Files :

          • cli/src/main/java/hudson/cli/CLI.java
          • changelog.html

          dogfood added a comment - Integrated in jenkins_main_trunk #1036 [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't Kohsuke Kawaguchi : 5f756c61706911f8db10897956657c7a2e50eda0 Files : cli/src/main/java/hudson/cli/CLI.java changelog.html

          I didn't got this working with Jenkins 1.427,
          the root problem seems to be related to Apache Proxy and Jenkins way of using http protocol for its fullDuplex implementation.

          https://issues.apache.org/bugzilla/show_bug.cgi?id=40029
          It seems that proxy expects the Content-Length to be correct but it will never get the expected amount of bytes.

          Basically, Apache proxy won't allow CLI to communicate with Master.

          Pawel Josefsson added a comment - I didn't got this working with Jenkins 1.427, the root problem seems to be related to Apache Proxy and Jenkins way of using http protocol for its fullDuplex implementation. https://issues.apache.org/bugzilla/show_bug.cgi?id=40029 It seems that proxy expects the Content-Length to be correct but it will never get the expected amount of bytes. Basically, Apache proxy won't allow CLI to communicate with Master.

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          cli/src/main/java/hudson/cli/CLI.java
          http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0
          Log:
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't
          work.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html cli/src/main/java/hudson/cli/CLI.java http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0 Log: [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't work.

          Code changed in jenkins
          User: Kohsuke Kawaguchi
          Path:
          changelog.html
          cli/src/main/java/hudson/cli/CLI.java
          http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0
          Log:
          [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't
          work.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Kohsuke Kawaguchi Path: changelog.html cli/src/main/java/hudson/cli/CLI.java http://jenkins-ci.org/commit/jenkins/5f756c61706911f8db10897956657c7a2e50eda0 Log: [FIXED JENKINS-10611] fall back to HTTP if direct TCP connection doesn't work.

            kohsuke Kohsuke Kawaguchi
            aheritier Arnaud Héritier
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: