jcmoraisjr / haproxy-ingress

HAProxy Ingress
https://haproxy-ingress.github.io
Apache License 2.0
1.04k stars 270 forks source link

Support h2 protocol without ssl #685

Open thyn opened 4 years ago

thyn commented 4 years ago

Haproxy support h2 without ssl on front. It disables http1. Is it possible to add setting to specify h2 protocol on frontend? Didn't find any setting inside template (v 0.10, v.011)

Unichron commented 4 years ago

You can use https://haproxy-ingress.github.io/docs/configuration/keys/#configuration-snippet options to configure most things that are not covered by explicit configuration keys.

thyn commented 4 years ago

You can use https://haproxy-ingress.github.io/docs/configuration/keys/#configuration-snippet options to configure most things that are not covered by explicit configuration keys.

I didn't find there how to append to bind attribute h2. Also i've checked template file - there was no any possibility to modify that setting. I've edited template by myself. But ,I just ask to have that option too

jcmoraisjr commented 4 years ago

You can hack the configuration adding eg :80 proto h2 in the bind-http config key. This will copied verbatim to the final config. bind-http doc here and haproxy's bind doc here.

jcmoraisjr commented 4 years ago

I'm considering to add a "proto" or at least a "custom-bind" config key in order to properly support and document such option.

Unichron commented 4 years ago

+1 for "custom-bind", i had the same problem with strict-sni in the past, and only found out i can hack the bind-https by looking at the source