INFRA-87: Enable HTTP/2 for all websites and services behind load balancers

Metadata

Source
INFRA-87
Type
Improvement
Priority
Major
Status
Closed
Resolution
Done
Assignee
Giovanni Tirloni
Reporter
Giovanni Tirloni
Created
2016-08-11T13:13:46.886-0400
Updated
2018-01-23T09:05:24.510-0500
Versions
N/A
Fixed Versions
N/A
Component
N/A

Description

Research what needs to be changed to support HTTP/2 with out nginx roles.

Comments

  • Giovanni Tirloni commented 2016-08-11T13:43:53.138-0400

    This may not work with HTTPS until CentOS updates OpenSSL to version 1.0.2 at least.

    https://nginx.org/en/docs/http/ngx_http_v2_module.html

    Note that accepting HTTP/2 connections over TLS requires the “Application-Layer Protocol Negotiation” (ALPN) TLS extension support, which is available only since OpenSSL version 1.0.2. Using the “Next Protocol Negotiation” (NPN) TLS extension for this purpose (available since OpenSSL version 1.0.1) is not guaranteed

    .

  • Giovanni Tirloni commented 2017-09-21T15:00:14.044-0400

    Requires CentOS 7.4 (which now includes newer OpenSSL) and newer nginx packages.

  • Giovanni Tirloni commented 2018-01-23T09:05:24.502-0500

    HTTP/2 has been enabled by default since Nov 2017

    https://github.com/inclusive-design/ops/blob/master/roles/nginx-reverse/templates/endpoint.conf.j2#L37-L41