Websocket support on Edge SWG (formerly ProxySG)
search cancel

Websocket support on Edge SWG (formerly ProxySG)

book

Article ID: 234070

calendar_today

Updated On:

Products

ISG Proxy

Issue/Introduction

Websocket support on Edge SWG (ProxySG) software.

Resolution

Edge SWG (ProxySG) software supports WebSockets over HTTP/1.1 in SGOS 6.7 and 7.3.

HTTP/2 is supported in 7.x, however WebSockets over HTTP/2 is not supported.

To address sites using WebSockets over HTTP/2, you will need to create policy to downgrade the HTTP requests to HTTP/1.1

For example, if site abc123.com is using WebSockets over HTTP/2 you would need the following policy to get site abc123.com to work through the Edge SWG (ProxySG):

<proxy>
 client.connection.ssl_server_name.substring=abc123.com http2.client.accept(no) http2.server.request(no)

or you can maintain a list like so:

<proxy>
condition=WebSocket_Sites http2.client.accept(no) http2.server.request(no)

define condition WebSocket_Sites

client.connection.ssl_server_name.suffix=.domain1.com
client.connection.ssl_server_name.suffix=.domain2.com
.
.
.
client.connection.ssl_server_name.suffix=.domainx.com

end

where the domains above are using WebSocket connections over HTTP/2