Hi All,

We have the following problem:
DSS version 2.9.3.2, NGINX enabled as per DSS documents
We are using Load Balancer, and only secure communication is allowed
AAEP application configuration is using the DSS secure port, 444 which basically is routed to port 8944 by the NGINX

Application URL in AAEP: https://dss-flow.pre.voip2.grpinf.net:444/dss-flow-app-icr/Start

The flow starts well but at the point where RDM/RAM module is started by the DSS flow we have an issue (badfetch), because the port is changing to the non secure port, 8944, and that is not allowed by the LB to go through, please see the traces below

2021-11-22 14:51:04.709 GMT+0000 [http-bio-8944-exec-10] INFO dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : Using SCESession B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr servlet : Rdm
2021-11-22 14:51:04.709 GMT+0000 [http-bio-8944-exec-10] DEBUG dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : Module Local Call to : [RDM/Start]
2021-11-22 14:51:04.709 GMT+0000 [http-bio-8944-exec-10] INFO dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : ** Pushed Stack Frame [/RDM]
2021-11-22 14:51:04.709 GMT+0000 [http-bio-8944-exec-10] DEBUG dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : request url copy is [http://dss-flow.pre.voip2.grpinf.net:8944/flow-engine/Rdm]
2021-11-22 14:51:04.709 GMT+0000 [http-bio-8944-exec-10] DEBUG dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : location is [/RDM/Start?___DDSESSIONID=B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr]
2021-11-22 14:51:04.709 GMT+0000 [http-bio-8944-exec-10] DEBUG dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : redirecting to [http://dss-flow.pre.voip2.grpinf.net:8944/RDM/Start?___DDSESSIONID=B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr]
2021-11-22 14:51:04.715 GMT+0000 [http-bio-8944-exec-1] INFO dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : Using SCESession B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr servlet : ErrorToICR
2021-11-22 14:51:04.715 GMT+0000 [http-bio-8944-exec-1] INFO dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : ** Popped Stack Frame [/RDM]
2021-11-22 14:51:04.715 GMT+0000 [http-bio-8944-exec-1] INFO dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : Assigning [GENERIC_ERROR] to [SSAFlowResult:result]
2021-11-22 14:51:04.715 GMT+0000 [http-bio-8944-exec-1] INFO dss-flow-app-icr - B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr : Using SCESession B04A307EB6E0892779802D31395AFFB7:/dss-flow-app-icr servlet : ReturnToICR

If I check the OD scert jar file I can see that the line URL is got from the:
mySession.getTraceOutput().writeln(1, "request url copy is [" + mySession.getRequestCopyURL() + "]");
line, which means that the
mySession.getRequestCopyURL()
provides the wrong URL with the wrong port.

Can that be because of the NGINX? Do you have some idea how to solve this?

Many thanks in advance
Attila

OD simply get the IP and port part of the URL from the request URL that invokes the servlet on the app server. So it makes sense that the request that comes into the app server has the port 8944 that you said it was redirected to. The module is supposed to be on the same app server so I am not sure why the port wouldn't work. I am sure there is some configuration you can play around on the app server and balancer but that's not my expertise. Our other customers are doing the same thing.