Forum Discussion
NimbostratusNeed Assistance with SSL Websockets
I have two VIPS. One VIP has port 80 and the same VIP also is configured for port 443. Behind these VIPS are severs that run websockets. I created an irule for the http that works but for the 443 it does not. Suggestions?
irule applied to the http VIP
when HTTP_REQUEST { if { ([HTTP::uri] starts_with "/socket.io") } { HTTP::disable } }
5 Replies
JPV_131616Cirrus
did you enable http profile on 443 vip also?
if not it acts like a passthrough and the irule won't work...
thx
Ron_130795Thanks JPV. I do have 'http' enable on the http profile for the 443 VIP.
- Eric_St__John
Employee
Along with the http profile(which I assume you have configured based on the HTTP::disable command), you will be required to configure a clientssl and serverssl profile. As the traffic passing through the BIG-IP is encrypted without those, you will not see the URI.
If you are running v11.4.0 or higher, you should not have to disable the http profile as the BIG-IP code should account for WebSocket traffic and disable it automatically.
Eric
- Ron_130795
I have a clientssl, however can I use the default serverssl?
- Eric_St__John
You should be able to use the default serverssl, or serverssl-insecure-compatible.
Eric
