xiangyuqi

I have another question: i do not want to use argo tunnel et.al. i want to deploy my server as the relay server, and assign the domain i have to this server.

Hi Maxime,

Nice to meet u!

Definitely, we followed the steps intrusted by your guidence.

Background: We had registered a web domain: den.chinabondconnect.com, pointing to the server that runing well. but we put a firewall in our data center to protect the internal network. The mgmt agent of firwall take over port 443.

We follow the steps gave by instructions,

> Import-Module WaykDen
> cd ~/den-test
Set-JetConfig -JetInstance 'den.chinabondconnect.com' -JetListeners @('tcp://0.0.0.0:8080', 'wss://0.0.0.0:7171,wss://<jet_instance>:443')
> Import-JetCertificate -CertificateFile .\fullchain.pfx -Password 'poshacme'
> Start-JetRelay

JetRelay started!

> $JetRelayUrl = 'https://jet.buzzword.marketing'
> (Invoke-WebRequest "$JetRelayUrl/health").StatusCode -Eq 200
Cannot connect remote server

The server assigned internal IP: 192,168,XX.7, i tried to use browser open the website: 192.168.XX.7:443 using server' browser, but in vain！

I telnet the IP :192.168.XX.7:443 through another PC in LAN, but still in vain.

Best regards,

Shawn

2327 0807

Hello Shawn,

I'm Maxime from the support team.

Could you please take us through how you setup your relay server(Jet)?

From there, we'll be able to better assist you.

Here's our guide on how to set it one such server up : https://github.com/Devolutions/WaykDen-ps/blob/master/docs/getting-started-relay.adoc

Best regards,

Yes, Marc.

I would share more background information:

I had registered the domain name, link to my server. of course i had a firewall to protect. the port 443 is occupied by the mgmt application of firewall. i had make some configurations of firewall, but i still cannot set up the relay server.

I tried to open my server IP:443 address, but in vain, still cannot find the resource.

It is harss me a while.

Hi Shawn,

Check your DNS and networking configuration, because den.chinabondconnect.com appears to point to a Fortinet Fortigate appliance now. Just open it in a browser and go through the certificate warnings, you'll see it is not Wayk Den on the other side.

Best regards,

Hi Marc,

I can install the certificate, but after i done my Jet Relay url set up, an unexpected error pop out, can you help that? i really confused why Jet cannot establish the SSL connection, my certificate is valid.

Thanks Marc,

I would try it again.

Best regards,

Shawn

2327 0807

okay,Marc,

Let me send you my crt file. and i will have a try of CRT encoding UTF-8 without the byte order mark(BOM).

Best regards,

Shawn

Hi Marc,

I think i met another problem, this time is related to certificate.

I try to install my .crt certificate, but an error stoped me:

I am sure my .crt is textual certificate, which i could see the letters using UltraEdit. the file is decode using ANSI.

Best regards,

Shawn

2327 0807

ohh, my typo!

Thanks Marc!

Hi Shawn,

The command in the screenshot has a few issues, it should look like this:

Set-WaykDenConfig -Realm 'chinabondconnect.com' -ExternalUrl 'https://den.chinabondconnect.com' -ListenerUrl 'http://localhost:4000'

Best regards,

Hi Marc,

Before i config the certification, i want to reconfig my configuration. i followed the instruction(https://github.com/Devolutions/WaykDen-ps#configuration), after i tying my new realm, windows pop out two errors forbiden me to moving forward, could you help me on it? and how could i proceed?

Hi Marc,

Thanks a lot for the detailed explanation, i will have a try using .crt with textual representation , then revert you my update.

Best regards,

Shawn

2327 0807

Hi,

I am researching the wayk den certificate's authorization issue. i find the related instruction here:https://github.com/Devolutions/WaykDen-ps#certificate-configuration. It suggest us use pem + key or pfx (PKCS#12) format. Can we use the CRT+key format ? since CRT is similar likt PEM, they are trasferable .

Thanks

Best regards,

Shawn

Hi Marc,

Sorry for my late reply, i am in self-quarantine in HK.

Actually, i did uninstall SEP software in my server, then it works. here below is SEP 14 we are using, maybe it still helpfu for you to verfiy your solution to solve the imcompatibilty of WAyk Den & SEP.

https://send.firefox.com/download/affa8a7f2bc5a6b6/#q0jU8JjVVBmQD6Qm6pkuvw

Best regards,

Shawn

2327 0807

Thank you, Mac.

Best regards,

Shawn

2327 0807

Thanks Marc,

'

it works!! I did get the website running after edited Wayk-den.yml, deleting configs within the name "mongo".

I remove the DNS setting in my server, but forgot to edie the Wayk-den.yml.

Thanks again for the continuous support for me.

Best regards,

Shawn

Hi Marc,

Attach more images for investigation:

I check the docker ps -a, the result listed below.

some container seems exit? is that normal?

Best regards,

Shawn

Hi Marc,

The problem still existed. please see my den-traefik record:

time="2020-04-03T01:42:46+08:00" level=info msg="Using TOML configuration file c:\\etc\\traefik\\traefik.toml"

time="2020-04-03T01:42:46+08:00" level=info msg="Traefik version v1.7.24 built on 2020-03-25_04:34:11PM"

time="2020-04-03T01:42:46+08:00" level=info msg="\nStats collection is disabled.\nHelp us improve Traefik by turning this feature on :)\nMore details on: https://docs.traefik.io/v1.7/basics/#collected-data\n"

time="2020-04-03T01:42:46+08:00" level=info msg="Preparing server http &{Address::4000 TLS:<nil> Redirect:0xc000598cc0 Auth:<nil> WhitelistSourceRange:[] WhiteList:<nil> Compress:false ProxyProtocol:<nil> ForwardedHeaders:0xc000956760} with readTimeout=0s writeTimeout=0s idleTimeout=3m0s"

time="2020-04-03T01:42:46+08:00" level=info msg="Starting provider configuration.ProviderAggregator {}"

time="2020-04-03T01:42:46+08:00" level=info msg="Starting server on :4000"

time="2020-04-03T01:42:46+08:00" level=info msg="Starting provider *file.Provider {\"Watch\":true,\"Filename\":\"\",\"Constraints\":null,\"Trace\":false,\"TemplateVersion\":0,\"DebugLogGeneratedTemplate\":false,\"Directory\":\"\",\"TraefikFile\":\"c:\\\\etc\\\\traefik\\\\traefik.toml\"}"

time="2020-04-03T01:42:46+08:00" level=info msg="Server configuration reloaded on :4000"

Best regard,

Shawn

2327 0807

Thanks Marc,

I think I had started warden successfully. see as attached:, but when I access http://localhost:4000, the error pop out :Bad Gateway. how could I solve it?

Oh, I remember I install the mongo db.msi, but not change the mongodb url. so I think 127.0.0.1 is currently used by mongodb.

In this case, I do not want Wayk Den use the mongoose intalled in my server, how could deactivate the pointed-link?

The previous instructions listed on git page:

To point Wayk Den to an existing MongoDB server, you need to configure a database connection string, and set MongoDB as external to avoid launching a MongoDB container instance:

PS > Set-WaykDenConfig -MongoExternal $true -MongoUrl 'mongodb://mongo-server:27017'

I want to deactivate it, then waykden will use the mongo db installed in docker.

Hi Shawn,

We've seen similar cases already (https://github.com/Devolutions/WaykDen-ps/issues/65#issuecomment-603934918). Is your host configured with a 127.0.0.1 DNS server address? By default Docker will use the DNS servers from the host, but 127.0.0.1 will not work because it is not the same 127.0.0.1 as in the internal docker network. Changing it to the full IP address on the host network should work.

Other than that, do you have a proxy server, VPN, etc?

Best regards,

Hi Marc,

Here below please find my den-server.txt:

2020-04-02T23:45:52.628453100+08:00 INFO den_server::router::router - Redis is not configured. Cache in memory will be used.

2020-04-02T23:45:52.648452400+08:00 WARN den_server::router::router - Keen client not configured.

2020-04-02T23:45:52.648452400+08:00 INFO den_server::router::router - Nats is not configured.

2020-04-02T23:45:52.648452400+08:00 INFO den_server::router::router - Starting listeners on ws://0.0.0.0:4491

2020-04-02T23:45:52.650453400+08:00 DEBUG reqwest::connect - starting new connection: http://den-lucid:4242/

2020-04-02T23:45:53.919444200+08:00 ERROR den_server - Unable to initialize DenServer: "error sending request for url (http://den-lucid:4242/client): error trying to connect: dns error: No such host is known. (os error 11001)"

Best regards,

Shawn

Hi Shawn,

Yes, please extract the den-server container logs like this and post them here:

docker logs den-server > den-server.txt

Best regards,

Hi Marc,

I tried to start waykDen again, luckily I could start some containers, but stopped at den-server step(see the screenshot below). Could you kindly help to resolve the issue?

Thanks vm.

Hi Shawn,

Adding %ProgramData%\Docker to the exclusion list would be insufficient, as this directory contains mostly files (containers, volumes, etc).

You need to disable specific SEP features that affect some processes on the host:

https://mdaslam.wordpress.com/2017/05/23/docker-container-windows-2016-server-with-sep-symantec-endpoint-protection/

Best regards,

Thanks Marc,

Just as you said it is SEP problem, docker run hello-world command is successful. So it means I could try to start waykden again ?

Best regards,

Shawn

2327 0807

Hi Marc,

Still a bit wired. When I follow the instructions https://docs.docker.com/engine/security/antivirus/, . Adding the path of docker into SEP antivirus exclusion list, but the system halted.

See my screenshot as below:

Thanks Marc,

When I tried to run docker run hello world again, the system hung.

I think you are right, the problem caused by SEP.

I would try the first solution : https://docs.docker.com/engine/security/antivirus/, if no work , then uninstall SEP.

Thanks

Shawn

Thanks vm Marc,

we have the Symantec end point antivirus software installed on our server, it is running normally when we start WaykDen.

I tried to run the command "docker run hello-world", but in vain. command report the same error we seen before. Please check the output screenshot and our docker info image as below:

Thanks

Shawn

Thanks Marc,

We had checked our docker version, the docker version is 19.03.5 build 2ee0c57608;

We are using physical host to install Wayk Den, more docker info please see my screenshot below:

Well, we had server using windows 2019, we will investigate the linux wakyden version, but we still want to have a try on windows server.

Best regards,

Shawn