Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [http2]

HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web.

HTTP/2 (originally named HTTP/2.0) is a major revision of the HTTP network protocol used by the World Wide Web. It was developed from the earlier experimental SPDY protocol, originally developed by Google. HTTP/2 was developed by the Hypertext Transfer Protocol working group (httpbis, where bis means "second") of the Internet Engineering Task Force. HTTP/2 is the first new version of HTTP since HTTP 1.1, which was standardized in RFC 2068 in 1997. The Working Group presented HTTP/2 to IESG for consideration as a Proposed Standard in December 2014, and IESG approved it to publish as Proposed Standard on February 17, 2015. The HTTP/2 specification was published as RFC 7540 in May 2015.

The standardization effort was supported by Chrome, Opera, Firefox, Internet Explorer 11, Safari, Amazon Silk and Edge browsers. Most major browsers added HTTP/2 support by the end of 2015.

According to W3Techs, as of June 2016, 8.4% of the top 10 million websites supported HTTP/2. According to research by isthewebhttp2yet.com, as of May 2016, CloudFlare provision HTTP/2 across more domains than any other network provider.

144 questions
2
votes
1 answer

How can Apache log whether requests are using HTTP2 or not, in a manner that can't be easily spoofed by the client?

According to this, including %H in your LogFormat is supposed to log the HTTP protocol version, however, it appears to be unreliable. As an example, one can telnet to port 80 of the web server and issue a GET / HTTP/2.0, which will cause Apache to…
Displayname71
  • 109
  • 1
  • 7
2
votes
1 answer

Apache with HTTP/2 and per-directory upload_max_filesize

I just upgraded my apache2 server on Debian 9.13 Stretch to start using HTTP/2. As far as I'm concerned, that requires switching from mod_php to PHP-FPM. The problem is that PHP-FPM does not obey certain apache directives from .htaccess. For…
Carlos Roldán
  • 121
  • 3
2
votes
0 answers

Unable to receive gRPC error during a response streaming call using HAProxy in HTTP mode

I'm working on a gRPC application that will be served behind HAProxy using the http mode. If the server application immediately (ie. before sending any responses) aborts the response streaming call with specific error, then the client application…
Michał Getka
  • 21
  • 2
2
votes
0 answers

Enable http2 on Debian 11 Bullseye and Apache 2.4.41

I'm testing Debian 11 Bullseye with Apache 2.4.41 and I'm trying to activate HTTP2 I did some things : sudo a2enmod http2 It returns : Module http2 already enabled Then I put this line on my SSL/HTTPS virtualhost : Protocols h2 h2c http/1.1 After…
GrandGTO
  • 31
  • 2
1
vote
1 answer

HTTP/1 to HTTP/2 translation via proxy

I have a legacy client application that supports HTTP/1 protocol only. Some of the servers accessed by this application no longer support the HTTP/1 protocol because they migrated to the HTTP/2 protocol. Is it possible to translate the requests made…
Lacobus
  • 111
  • 1
  • 5
1
vote
0 answers

Client connects to Cloudfront via HTTP2, then connects to an Apache Server via HTTP1, can HTTP2 vulnerabilities be exploited in the HTTP1 connection?

We have an environment where customers connect to a Cloudfront distribution via HTTP2 and then from the Cloudfront distribution to an Apache web server via a HTTP1 connection. [ client ] ---(https, http/2)--> [ cloudfront ] ---(http, http/1--> […
nicepalpal
  • 11
  • 3
1
vote
2 answers

Disable HTTP/2 connection reuse across domains

RFC 7540, § 9.1.1 states that Connections [...] MAY be reused for requests with multiple different URI authority components [...] as long as the origin server is authoritative [...]. So, for example, if the same origin server can serve…
kbolino
  • 371
  • 3
  • 9
1
vote
3 answers

HTTP/2 not enabled on a configured Apache 2.4.38 web server

I have a Debian 10 (had the exact same issue with Debian 9) running an Apache 2.4.38 web server. Apache modules mpm_event and http2 are installed and the websites are served through HTTPS. I have added the http2 line in every Apache virtualhost conf…
bolino
  • 273
  • 3
  • 15
1
vote
1 answer

HTTP/2: speed vs. security

As a measure for speeding up of webpage loading times i recommended to switch over from HTTP1.1 to HTTP/2 protocol. And just today, firtsly in my experience since HTTP/2 rising, i've heard as the argumentation for non-switching to HTTP/2, that…
Evgeniy
  • 255
  • 2
  • 10
1
vote
0 answers

Apache2 with HTTP/2 serves some content with h2, some with http/1.1

I have setup HTTP/2 with Apache 2.4.29. HTTP/2 is working as checked here https://tools.keycdn.com/http2-test. When I connect to my site via Chrome or Firefox only some content is using h2. Specifically static content is served via http/1.1 while…
James
  • 111
  • 3
1
vote
1 answer

Apache HTTP/2 connections are not persistent

So I decided to implement HTTP/2 through Apache mod_http2. It was working fine, however every request, except for those with under 1 sec between them, is non-persistent. I am sure of this because as per the browser's network tools, the SSL…
Ivan
  • 893
  • 2
  • 9
  • 23
1
vote
2 answers

Apache and Golang (or nodejs or springboot etc.) with SSLPROXYpass and HTTP2

my question is about "security" I suppose that this question is also for nodejs or springboot or whatever running on another port with apache as primary server Im trying some stuff with golang app and http2/push http2 need https my golang app is…
Ledahu
  • 11
  • 1
1
vote
1 answer

HTTP/2 between Nginx reverse proxy and Express

I have an Express web server behind Nginx reverse proxy. The Nginx is configured for HTTP/2. Is it better to leave the default http1 connection between Nginx and Express, or is there worth in upgrading Express to HTTP/2 also? I guess there'll be…
steakoverflow
  • 153
  • 1
  • 6
1
vote
1 answer

How to get Apache, Ubuntu, and PHP7 to work with HTTP/2?

I have followed the steps mentioned at https://http2.pro/doc/Apache but my website still only serves files as HTTP/1.1. I can see that the mod_http2 is in the config with no errors on restarting Apache: LoadModule http2_module…
gokujou
  • 265
  • 1
  • 4
  • 9
1
vote
4 answers

Upgrade Nginx behind cloudflare to http2. To do or not?

I am running nginx version: 1.12.1 behind a CloudFlare machine. The CloudFlare front is http2 enabled. I was wondering if it’s a good idea to upgrade to Nginx 1.9.5 that supports http2 ?. The cost of the upgrade is significant. My Linode centos is…
Quintin Par
  • 4,373
  • 11
  • 49
  • 72
1 2 3
…
9 10