Hi everyone.
I have installed Kong as ingress controller in Kubernetes to expose microservices.
There is 1 specific microservice, which uses websockets and this is the one that is giving me problems. Kong is rejecting websocket connections for some reason, I have installed the cors plugin, but I still can’t establish the connection.
In local the service works perfect, I can connect without problems. But when I upload it to production and put it behind Kong, when accessing the necessary route for the connection to the websocket, it rejects the connection and does not reach the service pod. While if I use one of the http endpoints of the same service, they work perfect, I only have problems with the websocket.
What problem may be happening in my case? I’ve been trying to fix it for a while but I don’t find much information.
What is the error you receive from Kong?
If you disabled the CORS plugin, does it work?
Iam trying to find any logs for the error. But i cant found anything.
I follow logs of proxy pod with this:
kubectl -n kong logs -f --tail=10 pod/ingress-kong-9994d9749-tpwkr proxy
but dont say anything about the requests.
this is the output:
Where i can find more Kong logs to see the request info?
Also i disabled the CORS plugin, but its still wrong.
Can you use Kong 1.3.1 and test this?
You might be running into https://github.com/Kong/kong/issues/5465.
Can anyone share an example of using websockets with kubernetes ingress controller (just the rough idea, i just need a starting place)? There is no mention of websocket in the kubernetes-ingress-controller/docs 
HI @Marcos , In classic kong fashion this really “just works” but there are no docs telling you how to do it and so several hours of sifting through code and bug reports is necessary to get you where you need to be. 
Anyways, simply put, you just need to wire up the routes to your websocket service as if it were a standard https endpoint, and set the redirect status code to 426.
In my case this means configuring a k8 ingress with the regular kong annotations in addition to the special 426 redirect status code:
from my values.yaml (helm chart deployment)
annotations:
kubernetes.io/ingress.class: "kong"
konghq.com/https-redirect-status-code: "426"
konghq.com/protocols: https
konghq.com/strip-path: "true"
My websocket service is then configured to operate over regular http and all seems well.
The deeper details of how this works are still buried in code, but it seems they simply added code to the core server to be able to handle http upgrades and thusly accommodate websocket connections by responding with the correct headers and keeping the connection open. Testing is still underway on my end, but so far it works 
Sources:
- Proxy Reference - v2.2.x | Kong Docs
- fix(proxy) do not clear Upgrade header if response Connection header contains Upgrade by bungle · Pull Request #6929 · Kong/kong · GitHub (start here and follow the referenced links)
Websocket request unable to pass through kong ingress , not reaching any microservice .
Websocket TCP request.
ebSocket connection to ‘wss://devapp.stackways.io/api/ms-websocket/socket/?id=6447b32705cdef68c7e5f261&type=server&EIO=4&transport=websocket’ failed:
doOpen @ main.js.gz:35143
open @ main.js.gz:34565
open @ main.js.gz:35443
socket_Socket @ main.js.gz:35384
open @ main.js.gz:36863
manager_Manager @ main.js.gz:36794
configureSocket @ main.js.gz:39775
componentDidMount @ main.js.gz:39734
oj @ react-dom.production.min.js:127
Aj @ react-dom.production.min.js:160
unstable_runWithPriority @ react.production.min.js:25
Da @ react-dom.production.min.js:60
ab @ react-dom.production.min.js:154
Te @ react-dom.production.min.js:146
(anonymous) @ react-dom.production.min.js:61
unstable_runWithPriority @ react.production.min.js:25
Da @ react-dom.production.min.js:60
Pg @ react-dom.production.min.js:61
ha @ react-dom.production.min.js:60
mk.Events.current @ react-dom.production.min.js:236
Ei @ react-dom.production.min.js:41
sentryWrapped @ main.js.gz:156691
sftp-ssh:1 The resource https://cdn.jsdelivr.net/npm/single-spa@5.9.0/lib/system/single-spa.min.js was preloaded using link preload but not used within a few seconds from the window’s load event. Please make sure it has an appropriate as value and it is preloaded intentionally.
WebSocket connection to ‘wss://devapp.stackways.io/api/ms-websocket/socket/?id=6447b32705cdef68c7e5f261&type=server&EIO=4&transport=websocket’ failed:
doOpen @ main.js.gz:35143
open @ main.js.gz:34565
open @ main.js.gz:35443
socket_Socket @ main.js.gz:35384
open @ main.js.gz:36863
(anonymous) @ main.js.gz:37075
sentryWrapped @ main.js.gz:156691
WebSocket connection to ‘wss://devapp.stackways.io/api/ms-websocket/socket/?id=6447b32705cdef68c7e5f261&type=server&EIO=4&transport=websocket’ failed:
doOpen @ main.js.gz:35143
open @ main.js.gz:34565
open @ main.js.gz:35443
socket_Socket @ main.js.gz:35384
open @ main.js.gz:36863
(anonymous) @ main.js.gz:37075
sentryWrapped @ main.js.gz:156691
WebSocket connection to ‘wss://devapp.stackways.io/api/ms-websocket/socket/?id=6447b32705cdef68c7e5f261&type=server&EIO=4&transport=websocket’ failed:
d