Score:0

Server

Disable URL decoding in certain urls KEMP Load Balancer

DeadSec

3/1/23, 3:26 PM

So I recently set up GitLab in my server and I use the kemp load balancer to reverse proxy and also manage other rules and stuff but today I noticed that the web IDE wasn't working and after looking at the logs and doing some research I found out that the reason for this to happen is that kemp is decoding slashes that it shouldn't be decoding in the first place and I was wondering if it's possible for me to either bypass URL decoding in all the URLs or in certain ones to avoid this problem from happening.

Right URL: https://example.domain.com/api/v4/projects/qcast%2Fqcast-vosk-stt

Wrong URL (Decoded by Kemp): https://example.domain.com/api/v4/projects/qcast/qcast-vosk-stt

The wrong URL originates a 404 in GitLab since it doesn't recognize the URL since the %2F cant be decoded into a slash.

The logs:

2021-11-01T14:58:35+00:00 Kemp kernel: Detect: Invalid URL [00.00.00.00:51554->10.1.10.10:443] '/api/v4/projects/qcast/qcast-vosk-stt' - Invalid URL specification (sid:0 rev:0)
2021-11-01T14:58:35+00:00 Kemp kernel: Detect: Invalid URL [00.00.00.00:51632->10.1.10.10:443] '/api/v4/projects/qcast/qcast-vosk-stt' - Invalid URL specification (sid:0 rev:0)
2021-11-01T14:58:35+00:00 Kemp kernel: Detect: Invalid URL [00.00.00.00:58300->10.1.10.10:443] '/api/v4/projects/qcast/qcast-vosk-stt' - Invalid URL specification (sid:0 rev:0)

Can I fix this with content rules or other way?

Update: I found out that the problem was being caused by this option

I disabled it temporarily for a quick fix but this should give some hits for helping me disable this rule for only a couple URLs or patterns.

PS: Its its the problem is not solved, I only included the temporary fix to help someone with more knowledge help me find how can I fix this with out disabling this sort of protection.

0 + 0

rewrite

url

load-balancing

rules

djdomi

3/1/23, 4:19 PM

if this issue is solved, please add a answer and accept it

DeadSec

3/1/23, 4:31 PM

@djdomi Its not solved i just found a temporary solution and added in the post so if anyone knows anything about rules in that option could help me solve the issue.

djdomi

3/1/23, 4:32 PM

then update the question so it doesn't soubds like its solved.

DeadSec

3/1/23, 4:37 PM

@djdomi added, sorry if I made it sound like it was fixed

djdomi

3/1/23, 4:57 PM

but if it fixes the problem then imho its resolved?

DeadSec

3/1/23, 5:09 PM

@djdomi Kinda cuz even though it solves my problem that disables protection against known attacks which I would rather not disable in the hole service.

djdomi

3/1/23, 5:15 PM

since kemp is mostly not known to me, maybe this artijel might helps you out: https://support.kemptechnologies.com/hc/en-us/community/posts/206343176-Kemp-Load-Balancer-html-rewrite

djdomi

3/1/23, 5:15 PM

Let us [continue this discussion in chat](https://chat.stackexchange.com/rooms/131042/discussion-between-djdomi-and-deadsec).

Doug Deden

3/1/23, 8:14 PM

You've posted this twice: https://superuser.com/questions/1684978/disable-url-decoding-in-certain-urls-kemp-load-balancer

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Disable URL decoding in certain urls KEMP Load Balancer

TH: ปิดใช้งานการถอดรหัส URL ในบาง URL ของ KEMP Load Balancer

RO: Dezactivați decodarea URL-urilor în anumite adrese URL KEMP Load Balancer

RU: Отключить декодирование URL-адресов для определенных URL-адресов KEMP Load Balancer

VI: Vô hiệu hóa giải mã URL trong các url nhất định KEMP Load Balancer

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.