[Freeswitch-users] WebSocket behind NGINX

[Anton]

Hi,

Sorry for not answering for a long time.

Dan, thank you, your recommendation really helped me.

So in order to proxy websocket request you need:
1. Proxy websocket requests in this way WSS -> (NGINX) -> FS WSS or WS 
-> (NGINX) -> FS WS
2. Modify local-network-acl
3. Modify apply-candidate-acl if you would like to drop more rtp candidates

PS: I highly recommend to watch this video about NAT issues and ACL 
configuration:
https://www.youtube.com/watch?v=_WSx-T6TriI

BR,
Anton Voylenko

On 01/30/2016 09:20 PM, Anton wrote:
> Hello All,
>
> I have to proxy all websocket requests though a nginx server. Right 
> now I am using next configuration:
>
> map $http_upgrade $connection_upgrade {
>     default upgrade;
>     ''      close;
> }
>
> server {
>     listen 443;
>     server_name  wss.somedomain.com.ua;
>
>     ssl on;
>     ssl_certificate      /etc/nginx/cert.pem;
>     ssl_certificate_key  /etc/nginx/private.key;
>
>     location / {
>         proxy_pass http://127.0.0.1:5066;
>         proxy_http_version 1.1;
>         proxy_set_header Upgrade $http_upgrade;
>         proxy_set_header Connection $connection_upgrade;
>         proxy_read_timeout 86400s;
>    }
>
>     access_log /var/log/nginx/wss_access;
>     error_log /var/log/nginx/wss_error debug;
> }
>
> I dumped traffic from nginx and found out that "switching protocol" 
> phrase was successful but INVITE message from my browser in pending 
> state.
> Maybe FreeSWITCH wants real IP not loopback? Who have faced with 
> similar problem?
>
> BR,
> Anton