Skip to main content
Version: 7.2405.x.x LTS

WebSocketInspectionFilter

Experimental Filter

Use the WebSocketInspectionFilter to inspect and validate WebSocket streams. Only text streams are supported.

Classname
ch::nevis::nevisproxy::filter::validation::WebSocketInspectionFilter
Library
libValidationFilters.so.1

Configuration​

MinimalWindowSize​

  • Type: integer
  • Usage Constraints: minimal value: 10
  • Default: 1024

The size of the minimal number of bytes within the regex has to match.

FrontendRules​

  • Type: newline-separated regular expressions
  • Usage Constraints: optional

If a text stream coming from the frontend matches one of the configured regular expressions, then the WebSocket connection is closed and a WS01 event is traced in the navajo.log.

BackendRules​

  • Type: newline-separated regular expressions
  • Usage Constraints: optional

If a text stream coming from the backend matches one of the configured regular expressions, then the WebSocket connection is closed and a WS01 event is traced in the navajo.log.

AlertLevel​

  • Type: enum
  • Possible values: ERROR, NOTICE, INFO
  • Default: ERROR

Configures the alert level of the traced event WS01, when a WebSocket connection is closed due to a rule violation.