<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Junxiao, can you make a wiki page with these instructions?<div class=""><br class=""></div><div class="">—</div><div class="">Alex<br class=""><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jan 27, 2015, at 9:33 PM, Junxiao Shi <<a href="mailto:shijunxiao@email.arizona.edu" class="">shijunxiao@email.arizona.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Dear folks<div class=""><br class=""></div><div class="">It's quite easy to add a wss=>ws proxy. Here's how:</div><div class=""><br class=""></div><div class="">1. Assume you already have a working HTTPS website on nginx.</div><div class=""><br class=""></div><div class="">2. Edit /etc/nginx/sites-enabled/https-site</div><div class="">Put the following at the top of this file:</div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div class="">map $http_upgrade $connection_upgrade {</div></div><div class=""><div class=""> default upgrade;</div></div><div class=""><div class=""> '' close;</div></div><div class=""><div class="">}</div></div></blockquote><div class="">Put the following inside 'server' section:</div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><div class=""> location /NFD {</div></div><div class=""><div class=""> proxy_pass <a href="http://[2001:db8::1]:9696" class="">http://[2001:db8::1]:9696</a>;</div></div><div class=""><div class=""> proxy_http_version 1.1;</div></div><div class=""><div class=""> proxy_set_header Upgrade $http_upgrade;</div></div><div class=""><div class=""> proxy_set_header Connection "Upgrade";</div></div><div class=""><div class=""> }</div></div></blockquote><div class="">Substitute 2001:db9::1 with the IP address of NFD. I only tested IPv6.</div><div class=""><br class=""></div><div class="">3. Edit ndn.js:</div><div class="">Look for 'new WebSocket', and change the parameter into:</div><div class=""><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class="">connectionInfo.wsuri || ('<a href="ws://'" class="">ws://'</a> + connectionInfo.host + ':' + connectionInfo.port)<br class=""></div></blockquote></div><div class=""><br class=""></div><div class="">4. Edit web app:</div><div class="">Change "new Face({ host:'<a href="http://nfd.example.com/" class="">nfd.example.com</a>', port:9696 })" to "new Face({ wsuri:'wss://<a href="http://secure.example.com/NFD" class="">secure.example.com/NFD</a>' })".</div><div class=""><br class=""></div><div class="">Yours, Junxiao<br class=""><div class="gmail_extra"><br class=""><div class="gmail_quote">On Fri, Jan 23, 2015 at 1:46 PM, Junxiao Shi <span dir="ltr" class=""><<a href="mailto:shijunxiao@email.arizona.edu" target="_blank" class="">shijunxiao@email.arizona.edu</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><p dir="ltr" class="">Hi Jeff</p><p dir="ltr" class="">An alternate to NFD serving wss directly is to add a frontend TLS=>TCP/HTTP proxy, such as STunnel or nginx.<br class="">
But I'm not sure how to configure those.</p><p dir="ltr" class="">Yours, Junxiao</p></blockquote></div></div></div></div>
_______________________________________________<br class="">Nfd-dev mailing list<br class=""><a href="mailto:Nfd-dev@lists.cs.ucla.edu" class="">Nfd-dev@lists.cs.ucla.edu</a><br class="">http://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev<br class=""></div></blockquote></div><br class=""></div></div></body></html>