• Resolved Alex Volkov

    (@vol4ikman)


    Hi. I will try to explain the issue:

    • W3 Total Cache free version installed and activated
    • Azure CDN configured as well via the plugin (SSL and HTTPS)
    • Website hosted at Cloudways with varnish cache enabled
    • Reverse Proxy enabled and configured according to the Cloudways tutorial
    • Sometimes (after 20-30 min for example) the website loads with mixed content (fonts) error (fonts not loaded), and it disappears once I clear the cache on the CloudWays server. When I clear the cache via w3 total cache only, the error still exists.

    We want go pro, but first we need to fix this weird issue…

    Thanks

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Contributor Marko Vasiljevic

    (@vmarko)

    Hello @vol4ikman

    Thank you for reaching out and I am happy to help!
    Just to confirm this, the issue only occurs if the Proxy cache is enabled and once purged the issue is gone?
    Also, is the Varnish the only proxy cache or is there another caching layer on your server which cannot be clear by the W3 Total Cache

    Thanks!

    Thread Starter Alex Volkov

    (@vol4ikman)

    It happens with or without proxy enabled – I tried both options.
    On the server we have Varnish and Redis + Object Cache pro(disabled or enabled same same)

    For example, only fonts crashed – https://snipboard.io/NtgURZ.jpg

    Blocked loading mixed active content “https://cdn.xxx.yyy/assets/wp-content/themes/airfleet/dist/images/Montserrat-Bold.woff”

    Blocked loading mixed active content “https://cdn.xxx.yyy/assets/wp-content/themes/airfleet/dist/images/Montserrat-SemiBold.woff”
    Plugin Contributor Marko Vasiljevic

    (@vmarko)

    Hello @vol4ikman

    Thank you for your feedback

    When a user visits a page served over HTTP, their connection is open for eavesdropping and man-in-the-middle (MITM) attacks. When a user visits a page served over HTTPS, their connection with the web server is authenticated and encrypted with SSL and hence safeguarded from eavesdroppers and MITM attacks.

    However, if an HTTPS page includes HTTP content, the HTTP portion can be read or modified by attackers, even though the main page is served over HTTPS. When an HTTPS page has HTTP content, we call that content “mixed”. The webpage that the user is visiting is only partially encrypted since some of the content is retrieved unencrypted over HTTP. The Mixed Content Blocker blocks certain HTTP requests on HTTPS pages.

    In your example Blocked loading mixed active content “https://cdn.xxx.yyy/

    As you can see the fonts are served form the HTTP and I cannot see the edited part on the screenshot.
    You should make sure the the HTTPS is configured on the Azure

    I hope this helps!

    Thanks!

    Thread Starter Alex Volkov

    (@vol4ikman)

    One more time. All the contents goes trough the cdn with https protocol. It works fine, until after 20-30 minutes (without any changes on website or webserver) fonts stop “loading” through https and it comes from http. Only fonts. Until I purge all caches on the webserver….

    Thread Starter Alex Volkov

    (@vol4ikman)

    What I should select under CDN Type? Generic mirror or Microsoft Azure Storage? I checked a lot of tutorials and there are 2 ways to configure it. Current setup is under Microsoft Azure Storage….

    Plugin Contributor Marko Vasiljevic

    (@vmarko)

    Hey @vol4ikman

    Not sure if you received our email.
    Please reach out to us direcly via Performance>Support and share the URL

    Thanks!

    Thread Starter Alex Volkov

    (@vol4ikman)

    Thanks. It is not relevant anymore.

    Switched to WP Rocket, everything works good there.

Viewing 7 replies - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.