Carbonio CE 26.3 – ...
 
Notifications
Clear all

Carbonio CE 26.3 – Ubuntu 24.94 Auth v3 (/zx/login/v3/*) returns 502 from Internet, works only inside LAN (Envoy issue?)

1 Posts
2 Users
0 Reactions
73 Views
(@giovanny-e)
New Member
Joined: 4 weeks ago
Posts: 1
Topic starter  
Hello,
I am running Carbonio CE 26.3.0 on Ubuntu 24.04 (single-server setup).
 
Issue:
Mobile apps (Chats / Mobile login) fail from Internet with:
  /zx/login/v3/auth/config → HTTP 502 (Connection to upstream refused)
 
However:
- Web UI works normally
- Mobile apps work when the client is inside the same LAN as the server
- Services are all running and “green”
 
Technical findings:
- carbonio-user-management is healthy and listening on an internal IP:
    127.78.0.5:10000 (confirmed via ss -lntp)
- Envoy sidecar listens on 127.78.0.5:20000
- NGINX routes /zx/* through Envoy by design
 
Tests performed:
- Direct access to the backend does NOT expose Auth v3:
    curl removed link
    curl removed link
   (no response (no JSON))
 
This confirms:
- Auth v3 endpoints are NOT exposed by carbonio-user-management directly
- Envoy is REQUIRED to publish /zx/login/v3/*
- There is no viable NGINX bypass/workaround for Auth v3
 
Observed behavior strongly suggests:
- Envoy does not mark the Auth v3 upstream as healthy in CE 26.3
- This only affects traffic coming from outside the LAN
- Results in consistent 502 errors for mobile apps
 
Has anyone else confirmed this behavior on CE 26.3 (Ubuntu 24.04)?
Is there a known issue or planned fix regarding Envoy/Auth v3 upstream health?
 
Thanks,
 
Giovanny.

   
Quote