ssl - F5 平衡器和 rawsockets(crossbar)

Question

我正在尝试使用 rawsocket 作为使用 autobahn-python 客户端和 crossbar 服务器的传输方式(不起作用，并且不建立连接)

DEBUG:file_uploader.spEm_PreFile:Logger Started in Debug mode
DEBUG:asyncio:Get address info dev4-dv.davinci-onsite.com:443, type=<SocketKind.SOCK_STREAM: 1>
DEBUG:asyncio:Getting address info dev4-dv.davinci-onsite.com:443, type=<SocketKind.SOCK_STREAM: 1> took 7.818 ms: [(<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('100.74.40.13', 443))]
DEBUG:asyncio:poll took 2.898 ms: 1 events
DEBUG:asyncio:connect <socket.socket fd=20, family=AddressFamily.AF_INET, type=SocketKind.SOCK_STREAM, proto=6, laddr=('0.0.0.0', 0)> to ('100.74.40.13', 443)
DEBUG:asyncio:poll took 2.280 ms: 1 events
DEBUG:asyncio:<asyncio.sslproto.SSLProtocol object at 0x1110a7f28> starts SSL handshake
DEBUG:asyncio:poll took 4.890 ms: 1 events
DEBUG:asyncio:poll took 2.498 ms: 1 events
DEBUG:asyncio:poll took 5.125 ms: 1 events
DEBUG:asyncio:poll took 2.074 ms: 1 events
DEBUG:asyncio:<asyncio.sslproto.SSLProtocol object at 0x1110a7f28>: SSL handshake took 17.8 ms
DEBUG:asyncio:<socket.socket fd=20, family=AddressFamily.AF_INET, type=SocketKind.SOCK_STREAM, proto=6, laddr=('172.21.53.155', 56279), raddr=('100.74.40.13', 443)> connected to dev4-dv.davinci-onsite.com:443: (<asyncio.sslproto._SSLProtocolTransport object at 0x1110a7c88>, <autobahn.asyncio.rawsocket.WampRawSocketClientProtocol object at 0x1110a7f98>)

这里我使用 websocket 作为使用高速公路 python 客户端和 crossbar 服务器的传输方式(确实有效，并且确实建立了连接)

DEBUG:file_uploader.spEm_PreFile:Logger Started in Debug mode
DEBUG:asyncio:connect <socket.socket fd=18, family=AddressFamily.AF_INET, type=SocketKind.SOCK_STREAM, proto=6, laddr=('0.0.0.0', 0)> to ('75.98.94.147', 443)
INFO:asyncio:poll took 2014.309 ms: 1 events
DEBUG:asyncio:<asyncio.sslproto.SSLProtocol object at 0x108de1320> starts SSL handshake
DEBUG:asyncio:poll took 6.991 ms: 1 events
DEBUG:asyncio:poll took 199.922 ms: 1 events
DEBUG:asyncio:poll took 0.341 ms: 1 events
DEBUG:asyncio:poll took 6.248 ms: 1 events
DEBUG:asyncio:poll took 3.031 ms: 1 events
DEBUG:asyncio:<asyncio.sslproto.SSLProtocol object at 0x108de1320>: SSL handshake took 221.4 ms
DEBUG:asyncio:<socket.socket fd=18, family=AddressFamily.AF_INET, type=SocketKind.SOCK_STREAM, proto=6, laddr=('172.21.53.155', 56272), raddr=('75.98.94.147', 443)> connected to 75.98.94.147:443: (<asyncio.sslproto._SSLProtocolTransport object at 0x108de13c8>, <autobahn.asyncio.websocket.WampWebSocketClientProtocol object at 0x108de1438>)
INFO:file_uploader.spEm_PreFile:SessionDetails(realm=<realm1>, session=8429055290522792, authid=<UATMATTHEWTO>, authrole=<system>, authmethod=ticket, authprovider=dynamic, authextra={'router': 'sl4spxbar302.dvms.local'}, resumed=None, resumable=None, resume_token=None)
2019-12-06T14:10:19 SessionDetails(realm=<realm1>, session=8429055290522792, authid=<UATMATTHEWTO>, authrole=<system>, authmethod=ticket, authprovider=dynamic, authextra={'router': 'sl4spxbar302.dvms.local'}, resumed=None, resumable=None, resume_token=None)


I highly suspect that f5 load balancer is causing this difference in behavior, but I do not have access to the server at work, any advise to make this work would helpful. 

Answer 1

您需要将 websockets 配置文件应用到 F5 虚拟服务器，以便正确处理 websockets 应用程序。

可以在此处找到 websockets 配置文件的详细信息:https://support.f5.com/csp/article/K14754

如果将 websockets 和 HTTP 配置文件应用于虚拟服务器，则 F5 将允许 websockets 流量作为直通。另请记住，如果这是 HTTPS 虚拟服务器，您将需要确保将客户端和服务器端 HTTPS 配置文件(SSL 卸载)应用于虚拟服务器。