Bot does not play nice with HTTP2

[ClaytonF]

I am currently proxying SinusBot through Apache and recently enabled HTTP/2. After doing so I noticed that resources (icons, thumbnails, etc) would fail to load and command requests such as status, files, play would either stay pending or get cancelled with no error code.


https://i.imgur.com/fC8B34K.png


I noticed that if I were to open it in incognito mode and log in for the first time everything would work correctly, until I hit the refresh button after which the same problems listed above would start to happen.

I do realize that the http2 module for Apache is still in beta but just wanted to post this here just in case it's a bug in SinusBot.

I also tried this in FireFox and experienced the same problems.

 

[flyth]

Whether it's a browser that requests stuff or a reverse proxy really should not matter as long as it speaks valid http/1.1 with the bot.
So it's more likely an error in your apache config, I guess.

 

[irgendwr]

Can you show us your Apache config? My bot works fine w/ a nginx reverse-proxy and http2 enabled.

 

[ClaytonF]

Can you show us your Apache config? My bot works fine w/ a nginx reverse-proxy and http2 enabled.

I'm not exactly sure why it would work fine on the first try but not after.

<VirtualHost *:80>
    ServerName music.domain.com
 
    Protocols h2c http/1.1
 
    RewriteEngine On
    RewriteCond %{HTTPS} off
    RewriteRule (.*) https://music.domain.com%{REQUEST_URI}
</VirtualHost>

<VirtualHost *:443>
    ServerName music.domain.com
    DocumentRoot /var/www/music.domain.com/public_html

    ErrorLog /var/www/music.domain.com/logs/error.log
    CustomLog /var/www/music.domain.com/logs/access.log combined
 
    Protocols h2 http/1.1
 
    Header set X-XSS-Protection "1; mode=block"
    Header always set X-Content-Type-Options "nosniff"
    Header always set X-Frame-Options "SAMEORIGIN"
 
    ProxyPreserveHost on
    ProxyPass /.well-known/acme-challenge !
    ProxyPass / http://localhost:8087/
 
    SSLEngine on
    SSLCertificateChainFile /root/simp_le/chain.pem
    SSLCertificateKeyFile /root/simp_le/key.pem
    SSLCertificateFile /root/simp_le/cert.pem
</VirtualHost>

 

[irgendwr]

http2 works (afaik) over https ony (broke my reverse proxy at least).
Try disabling http2 on all hosts listening on port 80.

"currently no browser supports HTTP/2 unencrypted."
(https://http2.github.io/faq/#does-http2-require-encryption)

 

[ClaytonF]

http2 works (afaik) over https ony (broke my reverse proxy at least).
Try disabling http2 on all hosts listening on port 80.

"currently no browser supports HTTP/2 unencrypted."
(https://http2.github.io/faq/#does-http2-require-encryption)

Commented out the line 4, didn't change anything.

Do you think I'd have to run SinusBot with SSL as well? Edit: Tried it, didn't work.

 

[irgendwr]

Do you think I'd have to run SinusBot with SSL as well?

No, as the bot is only accessed via http by the proxy.

 

[ClaytonF]

No, as the bot is only accessed via http by the proxy.

Yeah, I tried it but it changed nothing. I'm not exactly sure why this is only happening with SinusBot. All my other proxied services work fine.

 

[Patschi]

The communication works like:

• User <=> Reverse proxy: Encypted connection with HTTP/2
• Reverse proxy <=> Sinusbot: Unencrypted connection with HTTP/1.1

I guess that it's a problem of Apache2, not of the Sinusbot. Something is not correctly configured...
Sadly I'm not that fimilar with Apache2 anymore, as I'm using nginx for years now.

May you remove the "Header" configuration settings and try it again?