search

thingsboard / tbmq

Open-source, scalable, and fault-tolerant MQTT broker able to handle 4M+ concurrent client connections, supporting at least 3M messages per second throughput per single cluster node with low latency delivery. The cluster mode supports more than 100M concurrently connected clients.
https://thingsboard.io/products/mqtt-broker/
Apache License 2.0
581 stars 48 forks source link

Configure SSL/TLS for TBMQ #173

Open grantapeck opened 3 days ago

grantapeck commented 3 days ago

Component

Description Configuring SSL from port 80 to 443 and passing to proxy via 8083 results in 404 response or "not authorised" when logging in. I am using NGINX. Should this work? Should I be using HAProxy instead?

Environment

Thanks in anticipation. Grant

dmytro-landiak commented 2 days ago

Hi @grantapeck,

Thank you for reaching out. In general, it should be possible to configure SSL from port 80 to 443 and pass it through a proxy via port 8083 using NGINX. However, we have not conducted any specific tests with NGINX in this configuration, so I can't provide concrete guidance on this setup.

That said, we have tested a similar setup using HAProxy, which worked well for us. You might want to consider using HAProxy instead. Here’s a link to more details on configuring this setup with HAProxy: https://github.com/thingsboard/tbmq/tree/main/docker.

Please feel free to reach out if you have any further questions or need additional assistance.

Best regards!

grantapeck commented 1 day ago

Hey @dmytro-landiak,

Thank your for your response.

I'm new to linux, server admin, and definitely all the things thingsboard so my apologies for this question. . . effectively I'm a newbie.

Will this procedure for installing HAProxy work on the tbmq server: https://thingsboard.io/docs/user-guide/install/pe/add-haproxy-ubuntu/ so the ui is redirected across https?

I sense I'm missing the point.

The link to the tmbq repo you sent me has a .cfg for the HAProxy - should I use this instead of the one in the above procedure?

Thanks in anticipation. Grant