Forum Discussion

Becooked_349400's avatar
Becooked_349400
Icon for Altostratus rankAltostratus
Jan 22, 2018
Solved

HTTP and HTTPS Proxy generates websocket error 403 and 503.

Hello. My name is Byung.   I am able 3 years into F5 and still feel like a newbie. I came across a very weird websocket issue. My DB admin ask to proxy a web server listening on port 8888(http). S...
application delivery
devops
iRules
LTM
  • Becooked_349400's avatar
    Becooked_349400
    Jan 23, 2018

    when HTTP_REQUEST {

     

    HTTP::header insert X-Forwarded-Host [HTTP::host] X-Forwarded-Port 443 }

     

Kevin_Davies's avatar
Kevin_Davies
Icon for MVP rankMVP
Jan 23, 2018

The 503 will because websocket is not HTTP -- https://support.f5.com/csp/article/K14754. The 403 is because your app is using port 8888 and the virtual is on port 80. Have you analysed the TCP connections leaving the client machine using Tcpdump? You will need to ensure that its not trying to communicate on different ports. Alternatively you can make your virtual server listen on all ports by specifying 0 (remove the HTTP profile, add a simple iRule to CLIENT_ACCEPTED to log incoming connects with [TCP::local_addr]) then you will see from the logs what ports are being used from your clients address.