This issue typically arises due to a misconfiguration or incorrect setup of Cloudflare's WebSocket feature, which allows for the transmission of HTTP requests over HTTPS ports.
As a result, these HTTP requests are being routed through the standard HTTPS connection, bypassing security features that are in place to protect against such attacks. This can potentially expose sensitive data and compromise system integrity.
To resolve this issue, it is recommended to ensure that Cloudflare's WebSocket feature is properly configured and set up on the relevant servers or services. Additionally, regular maintenance tasks, such as updating software and plugins, should be performed to keep systems running securely.
It is also worth noting that some organizations may choose to disable WebSocket traffic altogether in their production environments for added security. However, this should be done with caution and under the guidance of security experts to ensure minimal disruption to system functionality.
https://conferences.law.stanford.edu/ipsummerschool2022/2014/01/21/purus-rhoncus-et-lundium-3