Forum Discussion

Zero27351's avatar
Zero27351
Icon for Altostratus rankAltostratus
Nov 08, 2023

problems connecting socket via F5

Hi Folks,

So we have a setup where we have two VIPs for the same site https://something.domain.com/login.php on ports 443 and 10800. Connecting to the site works (on 443). Once logged there is another connection going to the 10800 and here the connection fails via the F5 with the error:
EventClient.js:23 WebSocket connection to 'wss://something.domain.com:10800/SWWebsocketServer' failed:
connect @ EventClient.js:23
(anonymous) @ EventClient.js:94

When you bypass the F5 (ie go to the site directly) everything works fine. We have tried tweaking alot of things but nothing seems to work.
The 10800 vip has the fowlling configuration (see attached screenshots).


Anyone has any idea what this could be or has any suggestions?
Thanks in advance.

application delivery

5 Replies

Sort By
  • Lucas_Thompson's avatar
    Lucas_Thompson
    Icon for Employee rankEmployee
    Nov 10, 2023

    Be sure that the target pool of that virtual server is port 443 (one port) instead of 0 (all ports). If you use 0, the flow would look like this:

     client(S: ephemeral, d: 10800) --> <big-ip> --> server(S: ephemeral, d: 10800)

    but if the pool was port 443 explicitly, the BIG-IP automatically translates the destination port on the server-side of the flow, 

    client(S: ephemeral, d:  10800) --> <BIG-IP> --> server(S: ephemenal, d: 443)

     

  • F5-Enthusiast-X's avatar
    F5-Enthusiast-X
    Icon for Altostratus rankAltostratus
    Nov 15, 2023

    Hello,

    you try to let the client establish a Websocket Connection. Websocket by itself is still part of http. 
    So your Virtual Server is misconfigured. Please configure it like the *:443 Virtual Server. Also with required SSL Profiles. 

    After that configure a websocket profile too on the *:10800 Virtual Server. Then this should work.

     

    Regards

     

  • Zero27351's avatar
    Zero27351
    Icon for Altostratus rankAltostratus
    Nov 16, 2023

    Thanks guys, i tried both your suggestions but sadly had no effect, we are still seeing the same error presented. I am starting to wonder if this is a backend issue but then again it works fine if you bypass the f5 so..

  • Lucas_Thompson's avatar
    Lucas_Thompson
    Icon for Employee rankEmployee
    Nov 16, 2023

    Without packet capture analyis (don't send it on this forum), we're kind of guessing. You could try removing the HTTP profile and changing the vip to be Fast L4 to see if it's an L5-L7(ssl, http) or an L3-L4(ip, tcp) issue. 

    If you can't get it worked out, Support can help by analyzing your config and a packet capture: https://my.f5.com/manage/s/article/K2633

     

  • PSFletchTheTek's avatar
    PSFletchTheTek
    Icon for MVP rankMVP
    Nov 17, 2023

    You have turned on the websocket profile haven't you?
    Otherwise the f5 wont know to allow bidirectional comms.