Files
akanealw eec8c28fb3
Go Benchmark / Performance Regression Check (push) Has been cancelled
Cerberus Integration / Cerberus Security Stack Integration (push) Has been cancelled
Upload Coverage to Codecov / Backend Codecov Upload (push) Has been cancelled
Upload Coverage to Codecov / Frontend Codecov Upload (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (go) (push) Has been cancelled
CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Has been cancelled
CrowdSec Integration / CrowdSec Bouncer Integration (push) Has been cancelled
Docker Build, Publish & Test / build-and-push (push) Has been cancelled
Quality Checks / Auth Route Protection Contract (push) Has been cancelled
Quality Checks / Codecov Trigger/Comment Parity Guard (push) Has been cancelled
Quality Checks / Backend (Go) (push) Has been cancelled
Quality Checks / Frontend (React) (push) Has been cancelled
Rate Limit integration / Rate Limiting Integration (push) Has been cancelled
Security Scan (PR) / Trivy Binary Scan (push) Has been cancelled
Supply Chain Verification (PR) / Verify Supply Chain (push) Has been cancelled
WAF integration / Coraza WAF Integration (push) Has been cancelled
Docker Build, Publish & Test / Security Scan PR Image (push) Has been cancelled
Repo Health Check / Repo health (push) Has been cancelled
History Rewrite Dry-Run / Dry-run preview for history rewrite (push) Has been cancelled
Prune Renovate Branches / prune (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Nightly Build & Package / sync-development-to-nightly (push) Has been cancelled
Nightly Build & Package / Trigger Nightly Validation Workflows (push) Has been cancelled
Nightly Build & Package / build-and-push-nightly (push) Has been cancelled
Nightly Build & Package / test-nightly-image (push) Has been cancelled
Nightly Build & Package / verify-nightly-supply-chain (push) Has been cancelled
Update GeoLite2 Checksum / update-checksum (push) Has been cancelled
Container Registry Prune / prune-ghcr (push) Has been cancelled
Container Registry Prune / prune-dockerhub (push) Has been cancelled
Container Registry Prune / summarize (push) Has been cancelled
Supply Chain Verification / Verify SBOM (push) Has been cancelled
Supply Chain Verification / Verify Release Artifacts (push) Has been cancelled
Supply Chain Verification / Verify Docker Image Supply Chain (push) Has been cancelled
Monitor Caddy Major Release / check-caddy-major (push) Has been cancelled
Weekly Nightly to Main Promotion / Verify Nightly Branch Health (push) Has been cancelled
Weekly Nightly to Main Promotion / Create Promotion PR (push) Has been cancelled
Weekly Nightly to Main Promotion / Trigger Missing Required Checks (push) Has been cancelled
Weekly Nightly to Main Promotion / Notify on Failure (push) Has been cancelled
Weekly Nightly to Main Promotion / Workflow Summary (push) Has been cancelled
Weekly Security Rebuild / Security Rebuild & Scan (push) Has been cancelled
changed perms
2026-04-22 18:19:14 +00:00

2.8 KiB
Executable File

title, description
title description
WebSocket Support Real-time WebSocket connections work out of the box

WebSocket Support

Real-time applications like chat servers, live dashboards, and collaborative tools work out of the box. Charon handles WebSocket connections automatically with no special configuration needed.

Overview

WebSocket connections enable persistent, bidirectional communication between browsers and servers. Unlike traditional HTTP requests, WebSockets maintain an open connection for real-time data exchange.

Charon automatically detects and handles WebSocket upgrade requests, proxying them to your backend services transparently. This works for any application that uses WebSockets—no special configuration required.

Why Use This

  • Zero Configuration: WebSocket proxying works automatically
  • Full Protocol Support: Handles all WebSocket features including subprotocols
  • Transparent Proxying: Your applications don't know they're behind a proxy
  • TLS Termination: Secure WebSocket (wss://) connections handled automatically

Common Use Cases

WebSocket support enables proxying for:

Application Type Examples
Chat Applications Slack alternatives, support chat widgets
Live Dashboards Monitoring tools, analytics platforms
Collaborative Tools Real-time document editing, whiteboards
Gaming Multiplayer game servers, matchmaking
Notifications Push notifications, live alerts
Streaming Live data feeds, stock tickers

How It Works

When Caddy receives a request with WebSocket upgrade headers:

  1. Caddy detects the Upgrade: websocket header
  2. The connection is upgraded from HTTP to WebSocket
  3. Traffic flows bidirectionally through the proxy
  4. Connection remains open until either side closes it

Technical Details

Caddy handles these WebSocket aspects automatically:

  • Connection Upgrade: Properly forwards upgrade headers
  • Protocol Negotiation: Passes through subprotocol selection
  • Keep-Alive: Maintains connection through proxy timeouts
  • Graceful Close: Handles WebSocket close frames correctly

Configuration

No configuration is needed. Simply create a proxy host pointing to your WebSocket-enabled backend:

Backend: http://your-app:3000

Your application's WebSocket connections (both ws:// and wss://) will work automatically.

Troubleshooting

If WebSocket connections fail:

  1. Check Backend: Ensure your app listens for WebSocket connections
  2. Verify Port: WebSocket uses the same port as HTTP
  3. Test Directly: Try connecting to the backend without the proxy
  4. Check Logs: Look for connection errors in real-time logs