Fully Support WebSocket protocol in Azure AD Application Proxy
The current Application Proxy does not support rewriting ws:// or wss:// URLS from my testing.
We have an application that has it's content (HTML, JavaScript, images ...) hosted by IIS and a standalone service that provides data through websockets.
I created an app proxy for the IIS component requesting content rewriting and created a second app proxy for the websocket service. However, it seems that the first app proxy doesn't know to rewrite the embedded ws:// URLS to point them to the second app proxy.
Also, running a websocket tester against the second app proxy external URL fails as it doesn't seem to proxy them at all.
Additionally, the documentation for proxying websockets is non-existent.
Mark Snelling
shared this idea
We are planning to fully support WebSockets. We will update when we have more details.
15 comments
-
Jody Geers
commented
Azure VM - IIS - Azure/iisnode - node.js socket.io;
WebSocket connection to 'wss://www.foobar.com:8445/socket.io/?EIO=4&transport=websocket&sid=SINaDw5wHDMyYmOuAAAA'; failed: WebSocket is closed before the connection is established.
{"code":1,"message":"Session ID unknown"}
-
Anonymous
commented
Any updates? Estimations? Many modern web applications make use of Websockets and only supporting them in a limited way is not the way to go in 2020.
-
Allyn (Sr Security Tech Specialist)
commented
Websockets doesn't work in Chrome and Firefox, this is a major priority. Can there please be an update.
-
Drake
commented
Is this already working? I find signalr still does not work with web sockets when using azure AD app proxy.
-
jon
commented
too late
-
Jamie Brummell
commented
Any update, please?
-
Anonymous
commented
Websockets doesn't work in Chrome and Firefox yet. Been a year since we've heard anything, what's the update?
-
Allyn (Sr Security Tech Specialist)
commented
Solution needs to be compatible with all major browsers.
Looking to support an HTML 5 gateway e.g. Apache Guacamole -
Harish S
commented
WSS:// rewirte is still not working when application published via App Proxy. Is it still under works?
Also can we have some documentation on 2nd application to be published for Web sockets and what scenarios currently work -
Tiffany Morris
commented
Need this feature to put streamlit app behind AAD sso (wss:)
-
Matthias Fleschütz
commented
There is a survey...maybe this helps to speed up this feature?
https://aka.ms/appproxywebsocketsurvey -
Sam Buccieri-Gillett
commented
Is there any update on the progress of this please?
There's only WebSocket support for Qlik Sense so far, but it would be great to be able to proxy any WebSocket stuff
-
Anonymous
commented
Agreed, Collaborative editing in Confluence using Synchony is broken via Azure App proxy.
A resolution would be appreciated!
Thanks!
-
Richard
commented
I would like this feature for the MS Remote Desktop Web Client
-
Colum Clissmann
commented
I'd second this and add that it would be great for supporting applications that use SignalR