i'm having some trouble about running an Virtual Server in front of a K3s ingress.
I've setted up 4 virtual server, all point to the same destination address, but different port (different pool but final address is the same, only change the port)
For Http/s, MQTT/s zero problem, but when i'm trying to redirect the http traffic using websocket i've several problem.
Destination return several errors based on the Virtual Server tuning.
Actually i've the virtual server configured in TCP with HTTP profile (Websocket enable both client and server) and in security profile i've created a wss security to allow * addresses (HTTP,HTTPS,WS,WSS)
But when we try the application it return ERR_TRUNCATE_HEADERS. I've also create a new http profile based on the default, to increse the size of che Header Payload.
Also no i'm not checking the payload, and ignore any possible malformed packet (just to let everything pass).
On the application event log i can see all the request and i see the green thick so i suppose that everything is fine on the F5 side.
How can i be sure of that? Is there a way to do extra check or am i missing something?
Thank you guys.
Hi @paolodaniele , I'm not finding anything on the error you've noted. I'm asking around to see if there's any more thoughts on this. Seeing the requests in your application event log seems to be a positive sign for the BIG-IP passing along the traffic.
thank you for your answer. All i can say is that i'm quite noob with F5(i've always used other solutions) but i was able to learn quickly how it works and how to configure all things (the LTM HTTPS works fine without any problem)
All i can tell is that if i configure to pass not only TCP but instead all protocols (so no configuration of websocket or anything else) when i'm try to wscat to wss://myaddress:myport i get the Connected message and its open the wss shell. Using this configuration when i run the wss://myaddress:myport i get the answer that it expects the request ad HTTP.
This is why i'm thinking that it's me who's miss something in the config. Let me know if you want to see part of the configuration.
Thanks for your help.
I've tried to remove the ASM and it's not work.
Btw the version 22.214.171.124 so i've not the problem that had older version (i've done some digging before writing you!)
As i told to buulam i'm pretty noob with f5 and i didn't know the iHealth portal. I'm uploading the file to check with the tool.
If i cannot find anything i'll post you the config part (i've to blur some ip and name for gdpr privacy)