@push.rocks/smartproxy NPM

WebSocket Keep-Alive Fix for SNI Passthrough

Problem

WebSocket connections in SNI passthrough mode are being disconnected every 30 seconds due to:

WebSocket Heartbeat: The HTTP proxy's WebSocket handler performs heartbeat checks every 30 seconds using ping/pong frames. In SNI passthrough mode, these frames can't be injected into the encrypted stream, causing connections to be marked as inactive and terminated.
Half-Zombie Detection: The connection manager's aggressive cleanup gives only 30 seconds grace period for connections where one socket is destroyed.

Solution

For SNI passthrough connections: 1. Disable WebSocket-specific heartbeat checking (they're handled as raw TCP) 2. Rely on TCP keepalive settings instead 3. Increase grace period for encrypted connections

Current Settings

Default inactivity timeout: 4 hours (14400000 ms)
Keep-alive multiplier for extended mode: 6x (24 hours)
WebSocket heartbeat interval: 30 seconds (problem!)
Half-zombie grace period: 30 seconds (too aggressive)

Recommended Configuration

const proxy = new SmartProxy({
  // Increase grace period for connection cleanup
  inactivityTimeout: 14400000, // 4 hours default
  keepAliveTreatment: 'extended', // or 'immortal' for no timeout
  keepAliveInactivityMultiplier: 10, // 40 hours for keepalive connections
  
  // For routes with WebSocket over SNI passthrough
  routes: [
    {
      name: 'websocket-passthrough',
      match: { ports: 443, domains: 'ws.example.com' },
      action: {
        type: 'forward',
        target: { host: 'backend', port: 443 },
        tls: { mode: 'passthrough' },
        // No WebSocket-specific config needed for passthrough
      }
    }
  ]
});

Temporary Workaround

Until a fix is implemented, you can:

Use keepAliveTreatment: 'immortal' to disable timeout-based cleanup
Increase the half-zombie grace period
Use TCP keepalive at the OS level

Proper Fix Implementation

Detect when a connection is SNI passthrough
Skip WebSocket heartbeat for passthrough connections
Increase grace period for encrypted connections
Rely on TCP keepalive instead of application-level ping/pong

proxy network traffic management SSL TLS WebSocket port proxying dynamic routing authentication real-time applications high workload HTTPS reverse proxy server network security

@push.rocks/lik @push.rocks/smartacme @push.rocks/smartcrypto @push.rocks/smartdelay @push.rocks/smartfile @push.rocks/smartlog @push.rocks/smartnetwork @push.rocks/smartpromise @push.rocks/smartrequest @push.rocks/smartrx @push.rocks/smartstring @push.rocks/taskbuffer @tsclass/tsclass @types/minimatch @types/ws minimatch pretty-ms ws

@everything-registry/sub-chunk-745 @serve.zone/platformservice @serve.zone/dcrouter

9 months ago

9 months ago

9 months ago

9 months ago

9 months ago

9 months ago

11 months ago

9 months ago

9 months ago

11 months ago

9 months ago

11 months ago

9 months ago

9 months ago

11 months ago

9 months ago

12 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

9 months ago

9 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

11 months ago

11 months ago

11 months ago

12 months ago

11 months ago

9 months ago

9 months ago

9 months ago

8 months ago

8 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

8 months ago

8 months ago

8 months ago

8 months ago

9 months ago

8 months ago

8 months ago

8 months ago

9 months ago

8 months ago

8 months ago

9 months ago

11 months ago

11 months ago

8 months ago

9 months ago

11 months ago

8 months ago

9 months ago

11 months ago

9 months ago

11 months ago

8 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

8 months ago

8 months ago

8 months ago

8 months ago

11 months ago

11 months ago

11 months ago

9 months ago

11 months ago

11 months ago

10 months ago

10 months ago

9 months ago

8 months ago

11 months ago

8 months ago

11 months ago

11 months ago

8 months ago

11 months ago

8 months ago

11 months ago

8 months ago

11 months ago

8 months ago

11 months ago

8 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

8 months ago

8 months ago

11 months ago

11 months ago

8 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

9 months ago

9 months ago

9 months ago

11 months ago

9 months ago

9 months ago

9 months ago

11 months ago

11 months ago

9 months ago

10 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

11 months ago

11 months ago

9 months ago

11 months ago

9 months ago

11 months ago

9 months ago

11 months ago

9 months ago

10 months ago

10 months ago

10 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

8 months ago

9 months ago

9 months ago

11 months ago

8 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

11 months ago

9 months ago

9 months ago

9 months ago

1 year ago

1 year ago

3 years ago

3 years ago