Keycloak Docker behind loadbalancer with https fails

Question

I am trying to use clustered keycloak docker behind the A10 load balancer. I am trying access all the request by https from the client application. My issue is that the same setup is working when we try to access keycloak has HTTP but at the same time when we try to access this has HTTPS it is not working. Can anyone help me to solve this issue? Please let me know whether the issue is in the keycloak level or A10 load balancer level.

Answer 1

I know this is an older question, but I couldn't find a satisfying answer anywhere and I wanted to share my solution. This eventually worked for me in an AWS Environment with an Application Load Balancer:

Run the keycloak docker container with the environment variable PROXY_ADDRESS_FORWARDING=true

As seen in the keycloak docker documentation:

When running Keycloak behind a proxy, you will need to enable proxy address forwarding.

Answer 2

I don't know A10, but you have to ensure that it sets the request headers X-Forwarded-For and X-Forwarded-Proto. Then you have to configure Keycloak (Wildfly, Undertow) to work together with the SSL terminating reverse proxy (aka load balancer). See http://www.keycloak.org/docs/latest/server_installation/index.html#_setting-up-a-load-balancer-or-proxy for a detailed description.