https://bz.apache.org/bugzilla/show_bug.cgi?id=69129
Bug ID: 69129
Summary: Upgrade to Tomcat 10.1 breaks deployments with reverse
proxies
Product: Tomcat 10
Version: 10.1.24
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: WebSocket
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ------
With Tomcat 10.1 the configuration property
org.apache.tomcat.websocket.DISABLE_BUILTIN_EXTENSIONS has been removed[1].
As a result, in deployments with Tomcat 10.1 behind certain reverse proxies
(notably Microsoft IIS/ARR) WebSockets do not work anymore.
Preliminary analysis:
Browsers like Chrome and Firefox send the Sec-WebSocket-Extensions header which
contains a permessage-deflate attribute to the server. The reverse proxy passes
this header to the backend Tomcat 10.1 instance which creates a response with
Sec-WebSocket-Extensions: permessage-deflate. The reverse proxy cannot handle
such responses and closes the connection to the client.
We could not find a configuration option which could replace
org.apache.tomcat.websocket.DISABLE_BUILTIN_EXTENSIONS.
Ref.:
[1] https://tomcat.apache.org/tomcat-10.1-doc/changelog.html
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
