gsa 26.4.1 frontend failures (with nginx reverse proxy)

[tgurr]

Expected behavior

Have a working frontend without any error messages or broken functionality (which can be restored by reverting gsa back to 26.4.0).

Actual behavior

Experience error message / broken functionality with 26.4.1 in the form of:

TypeError: Failed to fetch dynamically imported module: https://greenbone.example.com/assets/TaskListPage-Dspqt6Wv.js

    at Lazy
    at RenderedRoute (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:146671)
    at Routes (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:150267)
    at Suspense
    at ErrorBoundary (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:117373)
    at https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:117120
    at div
    at O2 (https://greenbone.example.com/assets/index-CG4n-ZZl.js:2:35776)
    at main
    at O2 (https://greenbone.example.com/assets/index-CG4n-ZZl.js:2:35776)
    at div
    at https://greenbone.example.com/assets/index-CG4n-ZZl.js:2:692592
    at O2 (https://greenbone.example.com/assets/index-CG4n-ZZl.js:2:35776)
    at Page (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:211226)
    at Authorized (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:176603)
    at LoggedInRoutes
    at Router (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:148832)
    at BrowserRouter (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:162536)
    at AppRoutes (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:248573)
    at LanguageProvider (https://greenbone.example.com/assets/index-CG4n-ZZl.js:15:17887)
    at Provider_default (https://greenbone.example.com/assets/index-CG4n-ZZl.js:2:101474)
    at QueryClientProvider (https://greenbone.example.com/assets/index-CG4n-ZZl.js:2:81595)
    at ErrorBoundary (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:117373)
    at https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:117120
    at MantineThemeProvider (https://greenbone.example.com/assets/greenbone-ui-lib-DvtXyryr.js:40:178482)
    at MantineProvider (https://greenbone.example.com/assets/greenbone-ui-lib-DvtXyryr.js:40:192264)
    at ThemeProvider (https://greenbone.example.com/assets/greenbone-ui-lib-DvtXyryr.js:40:627330)
    at App (https://greenbone.example.com/assets/index-CG4n-ZZl.js:21:297077)
    at Ye (https://greenbone.example.com/assets/index-CG4n-ZZl.js:2:30197)
TypeError: Failed to fetch dynamically imported module: https://greenbone.example.com/assets/TaskListPage-Dspqt6Wv.js

In the nginx error log I can see various errors like:

2025/11/14 13:11:42 [error] 890909#890909: *1 upstream prematurely closed connection while reading response header from upstream, client: xxx.xxx.xxx.xxx, server: greenbone.example.com, request: "GET /assets/EditIcon-BBWWpnpV.js HTTP/2.0", upstream: "http://127.0.0.1:9392/assets/EditIcon-BBWWpnpV.js", host: "greenbone.example.com"
2025/11/14 13:11:42 [error] 890909#890909: *1 upstream prematurely closed connection while reading response header from upstream, client: xxx.xxx.xxx.xxx, server: greenbone.example.com, request: "GET /assets/TrashIcon-BLNAAR_b.js HTTP/2.0", upstream: "http://127.0.0.1:9392/assets/TrashIcon-BLNAAR_b.js", host: "greenbone.example.com"

when that happens, however trying to mess with nginx timeout/buffer settings (e.g. https://www.uptimia.com/questions/how-to-fix-nginx-upstream-prematurely-closed-connection-while-reading-response-header-from-upstream-error) didn't work for me.

When reloading the page, sometimes multiple times, it starts to work however when accessing it again in a private browser window the issue reappears, probably until everything has been cached by the browser.

Observation, not sure if something went wrong and are related or things have just changed and splitted into individual files probably causing the issue, there's a huge difference is the amount of files content of the -dist tarballs:

• gsa-dist-26.4.0.tar.gz contains an assets directory with 10 (big) files
• gsa-dist-26.4.1.tar.gz contains an assets directory with 664 (small) files

Steps to reproduce

1. gsad 24.9.0 with gsa 26.4.1

GVM versions

gsa: 24.9.0

gvm: 26.8.0

openvas-scanner: 23.31.2

gvm-libs: 22.31.1

Environment

Operating system: Exherbo Linux

Installation method / source: Source-based packages

Logfiles

[bjoernricks]

Hi, we tried to improve the loading of our JavaScript content by introducing lazy loading in #4952 Therefore the JS content is spread over several smaller files now. This should improve initial load times because the browser doesn't have to load, parse and interpret a big chunk of JS.

Currently we don't know really what's causing your issue but for now we think it is likely caused by nginx and not by our code changes. Are you able to load the new JS files manually in your browser (for example the mentioned https://greenbone.example.com/assets/TaskListPage-Dspqt6Wv.js)? Your nginx message mentions http/2. Could you try deactivating it, because gsad doesn't support http/2? Is gsad shipping the static files or nginx?

[tgurr]

Currently we don't know really what's causing your issue but for now we think it is likely caused by nginx and not by our code changes.

I think so too but I have no clue as for the why or how to resolve it. When reloading the site and the browser caches the remaining ones it couldn't access the first time due to the "502 Bad Gateway" errors things start to work just fine.

Are you able to load the new JS files manually in your browser (for example the mentioned https://greenbone.example.com/assets/TaskListPage-Dspqt6Wv.js)?

Yes, that works fine. Also just reloading the site when the error appears makes things work as well. And/or consecutive accessing of the site once the files have been cached by the browser.

Your nginx message mentions http/2. Could you try deactivating it, because gsad doesn't support http/2? Is gsad shipping the static files or nginx?

It's actually just a plain reverse proxy for accessing and TLS termination accessing gsad with plain http on 127.0.0.1:9392, nothing fancy:

/etc/nginx/nginx.conf

    server {
        listen 443 ssl;
        listen [::]:443 ssl;
        server_name greenbone.example.com;
        http2 on;

        # SSL security configuration
        include /etc/nginx/ssl_security.conf;

        access_log off;
        error_log off;

        location / {
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_pass http://127.0.0.1:9392;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_next_upstream error timeout http_502 http_503 http_504;
        }   
    }

/etc/nginx/ssl_security.conf

ssl_protocols TLSv1.3 TLSv1.2;
ssl_session_cache shared:SSL:10m;
ssl_ciphers HIGH:!aNULL:!MD5:!3DES:!CAMELLIA:!AES128:!AES256-SHA:!AES256-SHA256:!AES256-GCM-SHA384:!AES256-CCM8:!AES256-CCM;
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header Content-Security-Policy "upgrade-insecure-requests" always;
ssl_certificate /etc/ssl/example.com/example.com.crt;
ssl_certificate_key /etc/ssl/example.com/example.com.key;
ssl_stapling on;

Interestingly none of my colleagues can reproduce the problem using Chrome on Windows and now doing some additional testing I've also not yet been able to reproduce this on Firefox on Linux, on the same machine. This just appeared with the updated gsa with the lazy loading / many js files, like mentioned doing a downgrade back to the version with fewer files I can't reproduce the problem. I've also been able to reproduce this on another machine also running Linux with Chrome so if you're able to test that combination you might be able to reproduce else I currently don't know how to proceed further, if I'm the only one experiencing this problem feel free to just close this issue for now.

[sed-ats]

I have the same problem. And I also use nginx for redirection to port 443.
Google Chrome (mac OS) after updating the same error occurred. But it helped to simply refresh the browser page. And it didn't happen again.
Safari mac OS - not a single page works at all, for example when you click on the dashboard menu - such an error

TypeError:` Importing a module script failed.

Lazy
RenderedRoute@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:864406
Routes@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:867971
Suspense
ErrorBoundary@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:834319
withTranslation(ErrorBoundary)@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:834075
div
@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:34867
main
@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:34867
div
@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:694746
@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:34867
Page@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:928141
Authorized@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:894282
LoggedInRoutes
Router@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:866578
BrowserRouter@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:880262
AppRoutes@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:964999
LanguageProvider@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:715439
Provider_default@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:101555
QueryClientProvider@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:81635
ErrorBoundary@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:834319
withTranslation(ErrorBoundary)@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:834075
@mantine/core/MantineThemeProvider@https://greenbone.example.com/assets/greenbone-ui-lib-Dv7C41xK.js:1:192705
@mantine/core/MantineProvider@https://greenbone.example.com/assets/greenbone-ui-lib-Dv7C41xK.js:1:206863
ThemeProvider@https://greenbone.example.com/assets/greenbone-ui-lib-Dv7C41xK.js:1:641464
App@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:1013500
Ye@https://greenbone.example.com/assets/index-CAv_ppwW.js:2:30150

GSA_VERSION=26.7.0
GSAD_VERSION=24.12.1