• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Secure websockets (WSS)

Kevin Kleine

New Pleskian
Dear all,

Can anyone tell me how I should to set up a secure websocket server with Plesk?

At this point I have set up the Plesk firewall so that traffic from/to port 8080 is allowed and I have a websocket server (Ratchet - a PHP implementation) running perfectly (but only for non-secure (ws) websockets). I also have a SSL wildcard certificate in place (covers all the subdomains), which is set to be the Plesk default certificate.

I read about a proxy_wstunnel module for Apache, but I can't activate it under "Tools and settings -> Apache web server settings" because when I select it and apply, Plesk serves me the following error:

"Error: START httpd_modules_ctl --enable proxy_wstunnel websrvmng: /usr/local/psa/admin/sbin/apache_control_adapter execution failed: websrvmng: /usr/local/psa/admin/sbin/apache_control_adapter execution failed:"

After that, Apache won't start until I change the config file in "/etc/httpd/conf.modules.d/00-base.conf" and comment out the newly added line:

LoadModule proxy_wstunnel_module /usr/lib64/httpd/modules/mod_proxy_wstunnel.so

After that config line is 'gone', I can execute "apachectl" and everything is running again.

I have tried adding several additional directives for HTTP(S) under "Websites and domains -> {subdomain} -> Apache & Nginx settings", all along the lines of:

ProxyPass / wss://localhost:8080/
ProxyPassReverse / wss://localhost:8080

However, everytime I try to connect with a secure websocket client, the connection simply times out - it isn't working.

Can anyone help me with this? Thanks in advance!
 
Back
Top