Failed error during websocket handshake unexpected response code 404

Hello all,

I’ve been trying to figure out this actioncable Websocket error I’m getting on production in an AWS EB environment on an Application Load Balancer. It’s a 404 error and also Failed to Upgrade Websocket in the logs. I’ve tried possibly the first 5 pages of google and even Bing results looking for answers. I’ve also configured the nginx.conf file in many different ways in suggestions. Seems like no one wants to attempt to help on StackOverflow.

Here’s a link to my SO post for more information: https://stackoverflow.com/questions/53566797/actioncable-websocket-upgrade-and-404-error

Here’s my current nginx configuration file, inside conf.d/default.conf:

upstream backend {

server unix:///var/run/puma/my_app.sock;

}

server {

listen 80;

access_log /var/log/nginx/access.log;

error_log /var/log/nginx/error.log;

large_client_header_buffers 8 32k;

location / {

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header Host $http_host;

proxy_set_header X-NginX-Proxy true;

proxy_buffers 8 32k;

proxy_buffer_size 64k;

proxy_pass http://backend;

proxy_redirect off;

location /assets {

root /var/app/current/public;

}

# enables WS support

location /cable {

proxy_pass http://backend;

proxy_http_version 1.1;

proxy_set_header Upgrade websocket;

proxy_set_header Connection Upgrade;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

}

}

}

After running an nginx -t, this is the following readout:

nginx: [alert] could not open error log file: open() «/var/log/nginx/error.log» failed (13: Permission denied)

2018/12/10 18:42:30 [warn] 4638#0: the «user» directive makes sense only if the master process runs with super-user privileges, ignored in /etc/nginx/nginx.conf:5

2018/12/10 18:42:30 [warn] 4638#0: conflicting server name «localhost» on 0.0.0.0:80, ignored

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok

2018/12/10 18:42:30 [emerg] 4638#0: open() «/var/run/nginx.pid» failed (13: Permission denied)

nginx: configuration file /etc/nginx/nginx.conf test failed

I appreciate the help and you reading this.

I face this error while using channels for WebSockets on django production:

WebSocket connection to 'wss://domain.me/ws/orders/confirm_all/' failed: Error during WebSocket handshake: Unexpected response code: 404

while there’s no problem on localhost ( with runserver command )

routing.py:

from django.conf.urls import url

from channels.routing import ProtocolTypeRouter, URLRouter
from channels.auth import AuthMiddlewareStack
from management.consumers import ConfirmAllOrdersConsumer

application = ProtocolTypeRouter({
    'websocket': AuthMiddlewareStack(
        URLRouter([
            url(r'ws/orders/confirm_all/$', ConfirmAllOrdersConsumer),

        ])
    ),
})

js:

const ws_scheme = window.location.protocol === "https:" ? "wss" : "ws";

const ordersSocket = new WebSocket(
    ws_scheme + '://'
    + window.location.host
    + '/ws/orders/confirm_all/'
);

consumers.py:

import json
from channels.generic.websocket import WebsocketConsumer
from orders.models import Orders
from time import sleep


class ConfirmAllOrdersConsumer(WebsocketConsumer):

    def connect(self):
        self.accept()

    def disconnect(self, code):
        self.disconnect(code)

    def receive(self, text_data=None, bytes_data=None):
        text_data_json = json.loads(text_data)
        action = text_data_json['action']

        if action == 'confirm_all':
            revision_orders = Orders.objects.filter(status__exact='revision')
            for idx, order in enumerate(revision_orders):
                print(idx)
                order.status = 'confirmed'
                order.save()
                sleep(0.33)

                self.send(json.dumps({
                    'total_orders': revision_orders.count(),
                    'new_val': idx + 1
                }))

it’s working on localhost over http/ws, but not working over https/wss on production

I guess it’s from apache config, not script codes, so here is my apache2 config:

Apache2 website.conf

<VirtualHost *:80>
        # The ServerName directive sets the request scheme, hostname and port that
        # the server uses to identify itself. This is used when creating
        # redirection URLs. In the context of virtual hosts, the ServerName
        # specifies what hostname must appear in the request's Host: header to
        # match this virtual host. For the default virtual host (this file) this
        # value is not decisive as it is used as a last resort host regardless.
        # However, you must set it for any further virtual host explicitly.

        ServerName example.com
        ServerAlias www.example.com

        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html

        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn

        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined

        # For most configuration files from conf-available/, which are
        # enabled or disabled at a global level, it is possible to
        # include a line for only one particular virtual host. For example the
        # following line enables the CGI configuration for this host only
        # after it has been globally disabled with "a2disconf".
        #Include conf-available/serve-cgi-bin.conf

RewriteEngine on
RewriteCond %{SERVER_NAME} =www.example.com [OR]
RewriteCond %{SERVER_NAME} =example.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

Apache2 website-le-ssl.conf

<IfModule mod_ssl.c>
<VirtualHost *:443>
        # The ServerName directive sets the request scheme, hostname and port that
        # the server uses to identify itself. This is used when creating
        # redirection URLs. In the context of virtual hosts, the ServerName
        # specifies what hostname must appear in the request's Host: header to
        # match this virtual host. For the default virtual host (this file) this
        # value is not decisive as it is used as a last resort host regardless.
        # However, you must set it for any further virtual host explicitly.

        ServerName example.com
        ServerAlias www.example.com

        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html


    RewriteEngine On
    RewriteCond %{HTTP_HOST} ^www. [NC,OR]
    RewriteCond %{HTTPS} !on
    RewriteCond %{HTTP_HOST} ^(?:www.)?(.+)$ [NC]
    RewriteRule ^ https://%1%{REQUEST_URI} [R=301,L,NE]

        #RewriteEngine On
        #RewriteCond %{HTTP_HOST} ^www.example.com [NC]
        #RewriteRule ^/(.*)$ https://example.com/$1 [L,R=301]

        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn

        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined

        # For most configuration files from conf-available/, which are
        # enabled or disabled at a global level, it is possible to
        # include a line for only one particular virtual host. For example the
        # following line enables the CGI configuration for this host only
        # after it has been globally disabled with "a2disconf".
        #Include conf-available/serve-cgi-bin.conf

    Alias /static /home/user/website/static
    <Directory /home/user/website/static>
        Require all granted
    </Directory>

        Alias /media /home/user/website/media
        <Directory /home/user/website/media>
                Require all granted
        </Directory>

    <Directory /home/user/website/my_project/>
        <Files wsgi.py>
            Require all granted
        </Files>
    </Directory>

    WSGIScriptAlias / /home/user/website/my_project/wsgi.py
    WSGIDaemonProcess website_app python-path=/home/user/website python-home=/home/user/website/venv
    WSGIProcessGroup website_app
    
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
</VirtualHost>
</IfModule>

Any idea? Thank you.