search

igrigorik / istlsfastyet.com

Is TLS fast yet? Yes, yes it is.
https://istlsfastyet.com
421 stars 89 forks source link

haproxy support http2 #124

Closed StarDuster closed 8 years ago

StarDuster commented 8 years ago

Haproxy ALPN support was implemented in 1.5-dev18 version.

Just add bind *:443 ssl crt /path/ alpn h2,http/1.1 in frontend section of config file to enable http2 feature of haproxy.

Reference: https://news.ycombinator.com/item?id=9022807

igrigorik commented 8 years ago

We do list HAProxy as supporting ALPN, see: https://istlsfastyet.com/#server-performance

StarDuster commented 8 years ago

Umm, I'm a bit confused that why mark HAProxy as 'no' in the 'HTTP/2' column?

igrigorik commented 8 years ago

@StarDuster ALPN is a TLS extension that allows client and server negotiate the protocol. HAProxy supports the ALPN negotiation but it does not understand HTTP/2.. for that it must (as of today) proxy to a server that speaks h2c. Hence no HTTP/2 checkbox.

For more, see: https://hpbn.co/transport-layer-security-tls/#application-layer-protocol-negotiation-alpn

StarDuster commented 8 years ago

Thank you for your explaining.