adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

Piwigo 11.4 behind a Loadbalancer: Image Upload fails, because fetchRemote tries to reach external IP #1206

New Issue
Open
opened 2026-10-05 00:36:00 +02:00 by adam · 1 comment
adam commented 2026-10-05 00:36:00 +02:00
Owner
Copy link
Copy source

Hi,
i use Piwigo 11.4 on AWS behind a firewall and a ALB Loadbalancer. If a upload a image, i get a html 504 error. The reason is, that after the upload piwigo tries in the function fetchRemote to reach the file via curl or fopen. But the url is only available from outside of the firewall and not from inside from the server. So i see SYN_SENT packets and after a timeout, the apache sends a html 504 error code.
If i deactivate the curl and fopen check, it seems to working perfect.

Now i have some questions and it would be great, if someone has a hint for me:

  1. Is there a recommendation for using Piwigo behind a firewall and load balancer?
  2. Is there a configuration to deactivate the curl and fopen check?
  3. Is it safe to deactivate the curl and fopen check?
  4. Is there a way to configure the server url? So that not the firewall address but the internal address is used for the checks?

Thank you very much.

Best regards, Holger Koch

Piwigo 11.4.0
Operating system: Amazon Linux 2
PHP: 7.2.34 (Show info) [2021-04-21 07:10:20]
MySQL: 8.0.20 [2021-04-21 07:10:20]
Graphics Library: External ImageMagick 6.9.10-68

Hi, i use Piwigo 11.4 on AWS behind a firewall and a ALB Loadbalancer. If a upload a image, i get a html 504 error. The reason is, that after the upload piwigo tries in the function fetchRemote to reach the file via curl or fopen. But the url is only available from outside of the firewall and not from inside from the server. So i see SYN_SENT packets and after a timeout, the apache sends a html 504 error code. If i deactivate the curl and fopen check, it seems to working perfect. Now i have some questions and it would be great, if someone has a hint for me: 1. Is there a recommendation for using Piwigo behind a firewall and load balancer? 2. Is there a configuration to deactivate the curl and fopen check? 3. Is it safe to deactivate the curl and fopen check? 4. Is there a way to configure the server url? So that not the firewall address but the internal address is used for the checks? Thank you very much. Best regards, Holger Koch Piwigo 11.4.0 Operating system: Amazon Linux 2 PHP: 7.2.34 (Show info) [2021-04-21 07:10:20] MySQL: 8.0.20 [2021-04-21 07:10:20] Graphics Library: External ImageMagick 6.9.10-68 <!-- github-sync-id:863546239 -->
adam commented 2026-10-05 00:36:01 +02:00
Author
Owner
Copy link
Copy source

Hello,

My setup is similar - behind a firewall and with NAT. I get same behaviour: A timeout when fetchRemote is not commented.

As you mentioned fetchRemote tries to connect to the external IP, so I implemented NAT reflecting with following nftables rule:
ip daddr != 172.28.0.0/16 fib daddr type local tcp dport 80 dnat to 172.28.2.10:80
This allows fetchRemote to connect via the external IP (10.0.16.1 in my case) to the internal service.

However, now the connection gets directly established (no timeout) and data is transferred but I have following error.

01_timing
02_ErrorMessage

I hope this helps.

Thomas

Piwigo 11.5.0
Operating system: Linux
PHP: 7.4.19 (Show info) [2021-06-09 13:33:43]
MySQL: 5.5.5-10.3.27-MariaDB-0+deb10u1 [2021-06-09 13:33:43]
Graphics Library: ImageMagick 7.0.11-13
Hello, My setup is similar - behind a firewall and with NAT. I get same behaviour: A timeout when `fetchRemote` is not commented. As you mentioned `fetchRemote` tries to connect to the external IP, so I implemented `NAT reflecting` with following nftables rule: `ip daddr != 172.28.0.0/16 fib daddr type local tcp dport 80 dnat to 172.28.2.10:80` This allows `fetchRemote` to connect via the external IP (10.0.16.1 in my case) to the internal service. However, now the connection gets directly established (no timeout) and data is transferred but I have following error. ![01_timing](https://user-images.githubusercontent.com/80269316/121347007-07668980-c927-11eb-9bb5-9c0e8fca4d68.png) ![02_ErrorMessage](https://user-images.githubusercontent.com/80269316/121347014-0897b680-c927-11eb-9bf7-c9954a505f06.png) I hope this helps. Thomas ``` Piwigo 11.5.0 Operating system: Linux PHP: 7.4.19 (Show info) [2021-06-09 13:33:43] MySQL: 5.5.5-10.3.27-MariaDB-0+deb10u1 [2021-06-09 13:33:43] Graphics Library: ImageMagick 7.0.11-13 ``` <!-- github-comment-id:857619895 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#1206