<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10px">Hi <br class="" id="yui_3_16_0_1_1439897351442_3041">Looking for advise on deploying keycloak behind an F5 load balancer.<br class="" id="yui_3_16_0_1_1439897351442_3043"><br class="" id="yui_3_16_0_1_1439897351442_3045">An F5 has been setup with a pool pointing to two keycloak servers.<br class="" id="yui_3_16_0_1_1439897351442_3047">The browser connection to the F5 is using https, the F5 terminates the SSL and forwards to one of the unencrypted keycloak servers on port 8080.<br class="" id="yui_3_16_0_1_1439897351442_3049">The problem is that when hitting the admin console, https://fqdn/auth/admin, a 302 redirect lands on http://fqdn/auth/realms/master/tokens/login?client_id=... not maintaining the https protocol resulting in the login page not displaying as only https requests are allowed.<br class="" id="yui_3_16_0_1_1439897351442_3051"><br class="" id="yui_3_16_0_1_1439897351442_3053">In the docs there is a section about using a reverse proxy i.e.<br class="" id="yui_3_16_0_1_1439897351442_3055"><br class="" id="yui_3_16_0_1_1439897351442_3057">3.2.6.2. Enable SSL on a Reverse Proxy <br class="" id="yui_3_16_0_1_1439897351442_3059">http://keycloak.github.io/docs/userguide/html/server-installation.html#d4e336<br class="" id="yui_3_16_0_1_1439897351442_3061"> <br class="" id="yui_3_16_0_1_1439897351442_3063">It is not clear to me, I have not tried yet, if this configuration terminates ssl at the web server and then handles the 302 redirect back on the https protocol of the web server. <br class="" id="yui_3_16_0_1_1439897351442_3065"><br class="" id="yui_3_16_0_1_1439897351442_3067">I'm asking as I need to find out how to X-Forwarded-For and X-Forwarded-Proto to the fqdn and the protocol https. And then raise tickets which could take time to complete. Essentially I'm verifying that I'm configuring wildfly undertow and sockets correctly and the F5 forwarding headers.<br class="" id="yui_3_16_0_1_1439897351442_3069"><br class="" id="yui_3_16_0_1_1439897351442_3071">Regards<br class="" id="yui_3_16_0_1_1439897351442_3073"><div id="yui_3_16_0_1_1439897351442_3087" dir="ltr">Tom Connolly<br></div></div></body></html>