WebSocket Implementation Cheat Sheet

Updated 2026-05-28

🧠Study flashcards on this topic147 cards · spaced repetition→

WebSocket is a communication protocol defined in RFC 6455 that enables full-duplex, bidirectional communication over a single TCP connection. Unlike HTTP's request-response model, WebSocket maintains a persistent connection where both client and server can push messages independently, making it ideal for real-time applications like chat systems, live dashboards, collaborative editing, and multiplayer gaming. The protocol starts with an HTTP upgrade handshake, transitions to a framing-based message exchange, and remains open until explicitly closed. One key consideration: WebSocket connections are stateful and long-lived, requiring careful design for scalability, authentication, reconnection, and resource management — especially when handling thousands of concurrent connections across distributed servers.

What This Cheat Sheet Covers

This topic spans 28 focused tables and 197 indexed concepts, 147 flashcards. Below is a complete table-by-table outline of this topic, spanning foundational concepts through advanced details.

Table 1: Protocol FundamentalsTable 2: Connection Lifecycle EventsTable 3: Browser WebSocket APITable 4: WebSocket Close CodesTable 5: Data Framing and Message TypesTable 6: Node.js LibrariesTable 7: Go LibrariesTable 8: Rust LibrariesTable 9: Java LibrariesTable 10: Python LibrariesTable 11: Handshake and UpgradeTable 12: Authentication and AuthorizationTable 13: Heartbeat and KeepaliveTable 14: Error Handling and ReconnectionTable 15: Scaling and Load BalancingTable 16: Broadcast and Room PatternsTable 17: Socket.IO FeaturesTable 18: Message CompressionTable 19: Load Balancer ConfigurationTable 20: Security Best PracticesTable 21: Subprotocols and ExtensionsTable 22: Performance OptimizationTable 23: Testing and DebuggingTable 24: Rate Limiting and ThrottlingTable 25: Monitoring and ObservabilityTable 26: Comparison with AlternativesTable 27: Common Use CasesTable 28: Advanced Patterns

Quick IndexSubscribe to unlock

A jump-to index of every table row in this cheat sheet.

Mind MapSubscribe to unlock

An interactive map of every table and concept in this topic.

Table 1: Protocol Fundamentals

WebSocket is a thin framing protocol built on TCP, not HTTP — once the upgrade handshake completes, the semantics are entirely different. Understanding the framing model, connection lifecycle, and statefulness is the foundation before implementing anything else.

Concept	Example	Description
WebSocket Protocol (RFC 6455)	`wss://example.com/chat` `wss://example.com/updates`	• Standard defining WebSocket communication • wss is the recommended TLS-secured scheme for production deployments.
Opening Handshake	`GET /chat HTTP/1.1` `Upgrade: websocket` `Connection: Upgrade` `Sec-WebSocket-Key: x3JJHMbDL1EzLkh9GBhXDw==`	• HTTP upgrade request • client sends Sec-WebSocket-Key, server responds with 101 Switching Protocols.
Bidirectional Communication	`ws.send("Hello")` `ws.onmessage = (e) => {...}`	Both client and server can send messages at any time without polling.
Persistent Connection	Connection remains open until closed	• Eliminates HTTP overhead of repeated handshakes • reduces latency for real-time data.
Full-Duplex	Client and server send simultaneously	Unlike half-duplex HTTP, both directions are independent and concurrent.
Stateful Connection	Server tracks each client connection	• Connection state must be preserved • requires sticky sessions or state synchronization in multi-server setups.
Message Frame	Binary frame with opcode, mask bit, payload length	• Each message is wrapped in a frame with metadata • supports text, binary, ping, pong, close.
Sec-WebSocket-Accept	`Sec-WebSocket-Accept: HSmrc0sMlYUkAGmm5OPpG2HaGWk=`	• Server's response header • computed from client's key using SHA-1 hash to confirm handshake.
Low Latency	Sub-100ms message delivery	• No HTTP overhead per message • ideal for time-sensitive applications like gaming or trading.

Table 2: Connection Lifecycle Events

The WebSocket API exposes four key events and two state properties that together cover the full connection lifecycle. Correctly handling all four events — including the often-neglected error → close sequence — is essential for robust clients.

Event	Example	Description
open	`ws.onopen = () => console.log("Connected")`	Fired when handshake completes and connection is ready to send/receive.

The rest of this section is part of the full cheat sheet

Table 3: Browser WebSocket API

The browser WebSocket API is deliberately minimal — four events, three methods, and two properties. The new WebSocket() constructor doubles as the connection initiator; everything else happens through event handlers or the three methods below.

Method	Example	Description
new WebSocket()	`const ws = new WebSocket("wss://api.example.com")`	• Creates WebSocket connection • optionally accepts subprotocol as second parameter.

The rest of this section is part of the full cheat sheet

Table 4: WebSocket Close Codes

Close codes follow a standardized range: 1000–2999 are protocol-defined, 3000–3999 are for libraries and frameworks, and 4000–4999 are reserved for application-specific use. Codes 1006 and 1015 are reserved — they are set by the browser internally and must never be sent explicitly.

Code	Example	Description
1000 Normal Closure	`ws.close(1000, "Task complete")`	Connection fulfilled its purpose and closed gracefully.

The rest of this section is part of the full cheat sheet

Table 1: Protocol Fundamentals

Concept	Example	Description
WebSocket Protocol (RFC 6455)	`wss://example.com/chat` `wss://example.com/updates`	• Standard defining WebSocket communication • wss is the recommended TLS-secured scheme for production deployments.
Opening Handshake	`GET /chat HTTP/1.1` `Upgrade: websocket` `Connection: Upgrade` `Sec-WebSocket-Key: x3JJHMbDL1EzLkh9GBhXDw==`	• HTTP upgrade request • client sends Sec-WebSocket-Key, server responds with 101 Switching Protocols.
Bidirectional Communication	`ws.send("Hello")` `ws.onmessage = (e) => {...}`	Both client and server can send messages at any time without polling.
Persistent Connection	Connection remains open until closed	• Eliminates HTTP overhead of repeated handshakes • reduces latency for real-time data.
Full-Duplex	Client and server send simultaneously	Unlike half-duplex HTTP, both directions are independent and concurrent.
Stateful Connection	Server tracks each client connection	• Connection state must be preserved • requires sticky sessions or state synchronization in multi-server setups.
Message Frame	Binary frame with opcode, mask bit, payload length	• Each message is wrapped in a frame with metadata • supports text, binary, ping, pong, close.
Sec-WebSocket-Accept	`Sec-WebSocket-Accept: HSmrc0sMlYUkAGmm5OPpG2HaGWk=`	• Server's response header • computed from client's key using SHA-1 hash to confirm handshake.
Low Latency	Sub-100ms message delivery	• No HTTP overhead per message • ideal for time-sensitive applications like gaming or trading.

Table 2: Connection Lifecycle Events

Event	Example	Description
open	`ws.onopen = () => console.log("Connected")`	Fired when handshake completes and connection is ready to send/receive.

Table 3: Browser WebSocket API

Method	Example	Description
new WebSocket()	`const ws = new WebSocket("wss://api.example.com")`	• Creates WebSocket connection • optionally accepts subprotocol as second parameter.

Table 4: WebSocket Close Codes

Code	Example	Description
1000 Normal Closure	`ws.close(1000, "Task complete")`	Connection fulfilled its purpose and closed gracefully.