How To Enable Websocket: Barracuda Web Application Firewall
How To Enable Websocket: Barracuda Web Application Firewall
Overview
How the Barracuda Web Application work when it sees WebSocket traffic
A WebSocket connection is established by a handshake mechanism between the client and the
server, whereby both agree to upgrade from HTTP to WebSockets. Though the handshake itself
happens using the HTTP protocol, subsequent traffic does not conform to HTTP. In fact, the client and
server are free to choose any format for data exchange, including binary, compressed or encrypted.
Since the choice of the data format is left unspecified by the standard, the Barracuda Web Application
Firewall cannot generically parse data inside WebSockets for security inspection. It therefore acts as a
pass-through proxy allowing data in and out without performing any checks on the data.
© Barracuda Networks Inc., 2019 The information contained within this document is confidential and proprietary to Barracuda Networks Inc. No
portion of this document may be copied, distributed, publicized or used for other than internal documentary purposes without the written consent of
an official representative of Barracuda Networks Inc. All specifications are subject to change without notice. Barracuda Networks Inc. assumes no
responsibility for any inaccuracies in this document. Barracuda Networks Inc. reserves the right to change, modify, transfer, or otherwise revise this
publication without notice.