Wayk Bastion Port forwarding

Hi,

I saw you've been trying to get Wayk Bastion up and running for a few days now, and I'm sorry I didn't jump in earlier to help.

By default, Wayk Bastion listens in HTTP on port 4000, but that can be changed. You can choose to install a certificate in Wayk Bastion and have it listen in HTTPS, but in this case it needs ownership of the TCP port you're choosing (443 may be taken by something else like IIS, nginx or traefik already). You can also configure it behind a reverse proxy with TLS offloading, and handle HTTPS in the reverse proxy instead.

For instance, if you decide to use a reverse proxy, the configuration looks like this:

Set-WaykBastionConfig -ListenerUrl 'http://localhost:4000' -ExternalUrl 'https://bastion.now-it.works'

If you have a virtual machine exposed directly on the internet with a public IP, and wish to expose it on port 443, it looks like this:

Import-WaykBastionCertificate -CertificateFile 'certificate.pfx' -Password 'password'
Set-WaykBastionConfig -ListenerUrl 'https://localhost:443' -ExternalUrl 'https://bastion.now-it.works'

If you want to do simple TCP port forwarding without an HTTPS reverse proxy, it looks like this:

Import-WaykBastionCertificate -CertificateFile 'certificate.pfx' -Password 'password'
Set-WaykBastionConfig -ListenerUrl 'https://localhost:4000' -ExternalUrl 'https://bastion.now-it.works:4343'

Where the port forwarding rule is from TCP/4343 to <WaykBastionHost>:4000.

One last thing: you need to make sure WebSocket traffic is enabled and allowed when using a reverse proxy, or in an environment where traffic inspection is enforced.

Best regards,

I lost the ability to get into wayke after attemppting to do the last option simple port forwarding.

attempting localhost:4000 leads to a 404 page
attempting https://localhost:4000 gets me SSL_ERROR_RX_RECORD_TOO_LONG
attempting external https://den.network.domains:4343 gets me SSL_ERROR_RX_RECORD_TOO_LONG

here is my config and firewall rule:





The only thing I see that could be the issue is the Realm but per the install instruction if i recall it correctly, it isnt supposed to matter? or maybe its something else? for ssl I used letsencrypt and imported the cert and private key files as they were generated by certbot. No modifications since subsequent renewals will overwrite the files.

Hello,

As you mentioned, the realm will not have an incidence on your issue, it is just for display.

Looking at your firewall rule, it seem to redirect the port 4343 to 4000. This is done by Wayk Bastion itself, so you only need to open the port 4343 to the server, you do not need to do the translation at the firewall level.

Let us know if that fixes your issue.


Best regards,