Websocket support on Edge SWG (formerly ProxySG)

Products

• ISG Proxy

Issue/Introduction

Websocket support on ProxySG software.

Resolution

ProxySG software supports websockets over HTTP/1.1 in SGOS 6.7 and 7.3.

HTTP/2 is supported in 7.x, however websockets over HTTP/2 is not supported.

To address sites using websockets over HTTP/2, you will need to create policy to downgrade the HTTP requests to HTTP/1.1

For example, if site abc123.com is using websockets over HTTP/2 you would need the following policy to get site abc123.com to work through the ProxySG:

<proxy>
 client.connection.ssl_server_name.substring=abc123.com http2.client.accept(no) http2.server.request(no)

or you can maintain a list like so:

<proxy>
condition=Websocket_Sites http2.client.accept(no) http2.server.request(no)

define condition Websocket_Sites

client.connection.ssl_server_name.suffix=.domain1.com
client.connection.ssl_server_name.suffix=.domain2.com
.
.
.
client.connection.ssl_server_name.suffix=.domainx.com

end

where the domains above are using websocket connections over HTTP/2