Nginx as forward proxy for secure websocket (ws -> wss) -


i have following setup: 

+----------------------------+                +-----------------------------+ |                            |                |                             | |                            |                |                             | |                            |                |                             | |   +--------+   +--------+  |                |  +--------+     +-------+   | |   |        |   |        |  |                |  |        |     |       |   | |   | client |   |  nginx |  |                |  |  nginx |     | server|   | |   |        |   |        |  |                |  |        |     |       |   | |   |   ws +-------> wss +-------------------------> wss +--------> ws  |   | |   |        |   |        |  |                |  |        |     |       |   | |   |        |   |        |  |                |  |        |     |       |   | |   +--------+   +--------+  |                |  +--------+     +-------+   | |                            |                |                             | |                            |                |                             | +----------------------------+                +-----------------------------+

i want connect client server via secure websocket. not directly. client , server doesn't know security.

so client connects to: ws://localhost:6277/wstest

the client-side nginx listen on port 6277. want nginx forward connection securely ws.example.com/wstest.

the config of nginx is: 

server {      server_name localhost;     listen 6277;      location /wstest {          proxy_ssl_certificate         /etc/nginx/ssl/client.crt;         proxy_ssl_certificate_key     /etc/nginx/ssl/client.key;         proxy_ssl_protocols           tlsv1 tlsv1.1 tlsv1.2;         proxy_ssl_ciphers             high:!anull:!md5;          proxy_ssl_session_reuse on;          resolver 127.0.0.1;         proxy_pass https://ws.example.com/wstest;          proxy_http_version 1.1;         proxy_set_header upgrade $http_upgrade;         proxy_set_header connection $connection_upgrade;     } }

the client-side setup doesn't work. client gives me following error: the http response server [500] did not permit http upgrade websocket. , nginx gives me: "get /ocpp/cp-1/ws http/1.1" 500 193 "-" "-".

when bypass client-side nginx, client can connect directly (wss://ws.example.com/wstest) server through server-side nginx, works fine.

the nginx on server-side converts wss ws , forwards connection server.

is there wrong client-side nginx configuration? transform wss ws nginx no problem. possible transform ws wss nginx?

everything worked expected. had set different resolver. example: 

resolver 8.8.8.8;

Comments

Post a Comment

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

i've set bento/ubuntu-16.04 vagrant box using php 5.6, , getting following error quite few times when try , run shell script: "uncaught reflection exception: class domdocument not exist". i've tried adding following top of script (not together), each no success: "sudo apt-get install php5.6-xml", "sudo apt-get install php5-xml", "sudo apt-get install php-dom" i've tried resetting server "sudo service apache2 restart". does have suggestions?
Read more

vue.js - Create hooks for automated testing -

Image
qa guys complained can't automate frontend testing. because our html looks same outside. lazy hack did this <template> <div :role="$options.name"> ... </div> </template> <script> export default { name: 'vmcomponentname' } </script> which takes name script , applies html. in browser get: <div role="vmcomponentname"> ... </div> line :role="$options.name" goes in every component. is there dry er solutions? please share. additional details i'll explain in details looking for. imagine have vmusercreate form creates user. test case can create user . to automatically test without role, have use following selector: .wrapper > .wrapper > .wrapper > .submit-button the test extremely brittle (will break lot). if use roles can use [role="vmusercreateform"] .submit-button selector. many folds less brittle. so basically, i'm ...
Read more

Add new key value to json node in java -

i have json file : { "id":1, "name":"abc", "addressdetails": { "city":"newyork" } } i wanted add 1 more key-value ("pincode" : "414141") node 'addressdetails'. i tried using : objectmapper mapper = new objectmapper(); jsonnode root = mapper.readtree(new file("d://test.json")); objectnode node = mapper.createobjectnode(); node.with("addressdetails").put("pincode", "414141"); but it's not getting added, there way can ? you can try you should modify file path objectmapper mapper = new objectmapper(); objectnode nodes = mapper.readvalue(new file("d:\\test.txt"), objectnode.class); nodes.with("addressdetails").put("pincode", "414141"); mapper.writer().writevalue(new file("d:\\test.txt"), nodes);
Read more