Skip to content

Ensuring Websocket upgrade request's hostname is the same as the HTTP host, enabling HTTP Proxy for custom endpoint, and ensuring Proxy CONNECT request uses the actual front-end host. - #31829

Merged
anuchandy merged 5 commits into
Azure:mainfrom
anuchandy:websocket-proxy-improvements
Oct 31, 2022

Conversation

@anuchandy

@anuchandy anuchandy commented Oct 28, 2022

Copy link
Copy Markdown
Member

Fixes #31825 and #31826

… host, enabling HTTP Proxy for custom endpoint, and ensuring Proxy CONNECT request uses the actual front-end host.
@azure-sdk

Copy link
Copy Markdown
Collaborator

API change check

API changes are not detected in this pull request.

@conniey conniey left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@anuchandy

anuchandy commented Oct 30, 2022

Copy link
Copy Markdown
Member Author

The following cases with TransportType=AMQP_WEB_SOCKET are tested -

Host
CustomEndpointAddress (Frontending public Event Hubs)
CustomEndpointAddress (Frontending private Event Hubs)
CustomEndpointAddress (Frontending public Event Hubs) + host-header validation
CustomEndpointAddress (Frontending private Event Hubs) + host-header validation
CustomEndpointAddress (Frontending public Event Hubs) + HTTP Proxy
CustomEndpointAddress (Frontending private Event Hubs) + HTTP Proxy
CustomEndpointAddress (Frontending public Event Hubs) + HTTP Proxy + host-header validation
CustomEndpointAddress (Frontending private Event Hubs) + HTTP Proxy + host-header validation
Public Event Hubs using FQDN
Public Event Hubs using FQDN + HTTP Proxy
Private Event Hubs using FQDN (from a VM in the same vnet)

Where "host-header validation" means the host addressed by the custom endpoint is running in a mode that validates the host header. (See the below writeup for details).

The test environment is documented here - https://gist.github.com/anuchandy/40c67c64f371f38f5ce5de4cd3a52dc5

@anuchandy
anuchandy merged commit 6e3a415 into Azure:main Oct 31, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG] [AMQP] Websocket upgrade request's hostname must be the same as the HTTP connection host

4 participants