Invalid response from web ui breaks reverse proxy.

Invalid response from web ui breaks reverse proxy.

Invalid response from web ui breaks reverse proxy.
Invalid response from web ui breaks reverse proxy.
2025-11-13 15:22:08
Model: ER707-M2  
Hardware Version: V1
Firmware Version: 1.3.1 Build 20251009 Rel.67687

The web server on this gateway produces a response to initial connection that violates RFC 9112 and breaks rfc compliant reverse proxies, such as NGINX.

 

# curl http://192.168.3.1 -v
*   Trying 192.168.3.1:80...
* Connected to 192.168.3.1 (192.168.3.1) port 80 (#0)
> GET / HTTP/1.1
> Host: 192.168.3.1
> User-Agent: curl/7.88.1
> Accept: */*

< HTTP/1.1 200 OK
< Connection: close
< Transfer-Encoding: chunked
< ETag: "15aa-110-68e78c75"
< Last-Modified: Thu, 09 Oct 2025 10:20:37 GMT
< Date: Thu, 13 Nov 2025 03:48:15 GMT
< X-Frame-Options: sameorigin
< Content-Security-Policy: frame-ancestors 'self'
< Content-Type: text/html
< Content-Length: 272  ### Content-Length header should not be sent in same request with Transfer-Encoding header!! 
                       ### RFC 9112 states that "a sender (server) MUST NOT send a Content-Length header field in any message that contains a Transfer-Encoding header field."

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="refresh" content="0; URL=/webpages/login.html" />
</head>
</html>

 

This issue also exists with the ER605 if my research is correct. I see history of this issue going back years, but haven't found any discussion here, although the "Start a new Thread" button seems to be taking me on an endless loop of trying to redirect me to the US forums, so who knows if the search is working.

 

Could you request the firmware team drop the non-conforming "Content-Length" response?

 

Thanks.

 

0
0
#1
8 Reply
Re:Invalid response from web ui breaks reverse proxy.
2025-11-14 09:40:04

  @rcobourn 

To help assist and streamline the identification of the behavior, we recommend sending an email to forumsupport.usa@tp-link.com with the following information:

Subject: [Forum Escalation][ID 828308] (Summarize the  Reported Behavior briefly)

Forum Nickname: 

Thread URL:  

Model&Version: 

Description: 

Any Other Relevant Information (Logs, Config Files, Images, etc.): 

Once sent, a ticket will be created in our support system, and a member of the team will follow up to gather more information or troubleshoot a cause.

0
0
#2
Re:Invalid response from web ui breaks reverse proxy.
Thursday

Same problem here:

 

Hardware Version: ER605 v2.0
Firmware Version: 2.3.3 Build 20251029 Rel.18054

 

This error occurs because your backend (upstream) server is violating HTTP protocol standards by sending both Content-Length and Transfer-Encoding: chunked headers in a single response. Modern versions of Nginx strictly enforce RFC 9112, which states that a server must not send both, as they provide conflicting information about how to determine the message length.

0
0
#3
Re:Invalid response from web ui breaks reverse proxy.
Thursday

  @diopear I don't believe I pursued this through email, as there are of course work arounds, but if you're game, go for it.

diopear wrote

Same problem here:

 

Hardware Version: ER605 v2.0
Firmware Version: 2.3.3 Build 20251029 Rel.18054

 

This error occurs because your backend (upstream) server is violating HTTP protocol standards by sending both Content-Length and Transfer-Encoding: chunked headers in a single response. Modern versions of Nginx strictly enforce RFC 9112, which states that a server must not send both, as they provide conflicting information about how to determine the message length.

 

0
0
#4
Re:Invalid response from web ui breaks reverse proxy.
Thursday

  @rcobourn Can you share what work around you successfully tested? To be honest, I haven't been able to work around this problem with NGINX.

0
0
#5
Re:Invalid response from web ui breaks reverse proxy.
Thursday

  @diopear I just remote into a machine on the internal network and access the router settings from there.

0
0
#6
Re:Invalid response from web ui breaks reverse proxy.
Yesterday - last edited Yesterday

Hi  @diopear 

@rcobourn 

 

Thank you for your feedback.

We have identified the cause of the issue and plan to include a fix in a future update.

As a workaround, we recommend using the Omada controller to manage your gateway, which should help avoid this problem.

 

If you don't want to use Omada controller in your network, don't hesitate to let me know.

diopear wrote

  @rcobourn Can you share what work around you successfully tested? To be honest, I haven't been able to work around this problem with NGINX.

 

0
0
#7
Re:Invalid response from web ui breaks reverse proxy.
Yesterday

 Hi @Vincent-TP I don't intend to use the Omada Controller; I'll wait for the fix update. Thanks!

0
0
#8
Re:Invalid response from web ui breaks reverse proxy.
11 hours ago

Hi  @diopear 

Thanks for the reply.

To better assist you, I've created a support ticket via your registered email address and escalated it to our support engineer to look into the issue. The ticket ID is TKID260560975. Please check your inbox and confirm that the support email was received. Thanks!
Once the issue is resolved, please update this thread with your solution to help others who may encounter the same problem.
Many thanks for your excellent cooperation and patience!

diopear wrote

 Hi @Vincent-TP I don't intend to use the Omada Controller; I'll wait for the fix update. Thanks!

 

0
0
#9