Payara web kubernetes login slowness

Technical Discussion
1

Dear all,

When deploying a payara web application in k8s a form based login succeeds, but the requested page only shows after waiting ± 60 seconds.

When the exact same application runs in docker swarm behind an apache proxy the requested page shows instantly.

The working setup behind apache is as follows:

  • https outside, http inside
  • x-forwarded-proto: https
  • transport-guarantee: CONFIDENTIAL

The login post returns a 302 with a https location.

The setup in k8s behind ingress with the delay is as follows:

  • https outside, http inside
  • x-forwarded-proto: https

Using transport-guarantee: CONFIDENTIAL in k8s behind ingress causes a recursing 302.

Behind ingress the login post returns a 302 with a http location.

Does anyone recognize this problem and perhaps even solved it?

Perhaps the x-forwarded-proto never reaches payara, but I don’t know which logging to turn on to check that.

I’ve tried a lot of things without success.

Regards, Eduard

2

The slowness isn’t caused by missing x-forwarded-proto.

That wás lacking, use-forwarded-headers: "true"in nginx solved that but the delay remains

3

with this fix CONFIDENTIAL also works, delay after login remains