<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Andrey,<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 2 Feb 2021, at 18:52, Andrey Khramov <<a href="mailto:andrey@apporto.com" class="">andrey@apporto.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hello,Roman<div class=""><br class=""></div><div class="">Thanks for your reply.</div><div class=""><br class=""></div><div class="">I already enabled HTTP/3 (QUIC) in those the browsers (Firefox 85, Chrome 88) accroding to ttps://<a href="http://quic.nginx.org/readme.html" class="">quic.nginx.org/readme.html</a>..</div><div class="">The <a href="https://quic.nginx.org" class="">https://quic.nginx.org</a>
website detects HTTP/3 (QUIC) support in the browsers.</div></div></div></blockquote><div><br class=""></div><div>Try cleaning browser cache.</div><div><br class=""></div><div>Also check if there are lines with the word ‘quic’ in the debug log when you open the page.</div><div><br class=""></div><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="">Thanks. Regards</div><div class=""><br class=""></div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Feb 2, 2021 at 2:47 PM Roman Arutyunyan <<a href="mailto:arut@nginx.com" class="">arut@nginx.com</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;" class="">Hi Andrey,<br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On 2 Feb 2021, at 17:30, Andrey Khramov <<a href="mailto:andrey@apporto.com" target="_blank" class="">andrey@apporto.com</a>> wrote:</div><br class=""><div class=""><div dir="ltr" class="">Hello, there<br class=""><br class="">I tried to test the HTTP/3 (QUIC) with nginx-quic in several days.<br class="">But I couldn't test HTTP/3 (QUIC).<br class=""><br class="">I built the quic branch of nginx-quic repo according to README of that repo.<br class="">The configuration options follows as below:<br class="">$ ./auto/configure --prefix=/etc/nginx \<br class=""> --sbin-path=/usr/sbin/nginx \<br class=""> --conf-path=/etc/nginx/nginx.conf \<br class=""> --pid-path=/var/run/nginx.pid \<br class=""> --error-log-path=/var/log/nginx/error.log \<br class=""> --http-log-path=/var/log/nginx/access.log \<br class=""> --with-debug \<br class=""> --with-http_v2_module --with-http_ssl_module \<br class=""> --with-http_v3_module --with-http_quic_module \<br class=""> --with-stream_quic_module \<br class=""> --with-cc-opt="-I../boringssl/include" \<br class=""> --with-ld-opt="-L../boringssl/build/ssl \<br class=""> -L../boringssl/build/crypto"<br class="">$ make<br class=""><br class="">To install the nginx-quic, I installed the nginx 1.19.6 package on Ubuntu 18.04 and replaced the nginx binary with the nginx-quic:<br class="">$ sudo cp objs/nginx /usr/sbin/<br class=""><br class="">I configured that the nginx-quic works as load-balancer of HTTPS:<br class="">HTTPS -> nginx-quic (7443 port) -> Apache2 (80 port) -> Apache Tomcat (8080 port)<br class=""><br class="">The configuration file (nginx.conf) follows as below:<br class=""><br class="">user nginx;<br class="">worker_processes auto;<br class=""><br class="">events {<br class=""> worker_connections 1024;<br class="">}<br class=""><br class="">http {<br class=""> log_format quic '$remote_addr - $remote_user [$time_local] '<br class=""> '"$request" $status $body_bytes_sent '<br class=""> '"$http_referer" "$http_user_agent" "$quic" "$http3"';<br class=""><br class=""> access_log /var/log/nginx/access.log quic;<br class=""> error_log /var/log/nginx/error.log debug;<br class=""><br class=""> server {<br class=""><br class=""> listen 7443 http3 reuseport; # Enable HTTP/3.<br class=""> listen 7443 ssl; # Enable HTTP/1.1 (optional).<br class=""><br class=""> ssl_certificate /home/ubuntu/andrey/http3/example-fullchain.pem;<br class=""> ssl_certificate_key /etc/ssl/private/example.key;<br class=""> ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;<br class=""><br class=""> location / {<br class=""> add_header alt-svc '$http3=":7443"; ma=86400'; # Advertise that QUIC is available<br class=""> add_header QUIC-Status $quic; # Sent when QUIC was used<br class=""><br class=""> proxy_pass <a href="http://backend1/" target="_blank" class="">http://backend1</a>;<br class=""> }<br class=""> }<br class=""><br class=""> server {<br class=""> listen 8443 ssl http2;<br class=""><br class=""> ssl_certificate /home/ubuntu/andrey/http3/example-fullchain.pem;<br class=""> ssl_certificate_key /etc/ssl/private/example.key;<br class=""> ssl_protocols TLSv1 TLSv1.1 TLSv1.2;<br class=""><br class=""> location / {<br class=""> proxy_pass <a href="http://backend2/" target="_blank" class="">http://backend2</a>;<br class=""> }<br class=""> }<br class=""><br class=""> upstream backend1 {<br class=""> ip_hash;<br class=""> server localhost max_fails=3 fail_timeout=30s;<br class=""> }<br class=""><br class=""> upstream backend2 {<br class=""> ip_hash;<br class=""> server localhost max_fails=3 fail_timeout=30s;<br class=""> }<br class="">}<br class=""><br class="">I opened UDP 7443 port on the cloud server (AWS).<br class=""><br class="">I tested HTTP/3 (QUIC) with the client tools (neqo-client, curl-http3) and the browsers (Firefox 85 and Chrome 88) according to <a href="https://quic.nginx.org/readme.html" target="_blank" class="">https://quic.nginx.org/readme.html</a>.<br class="">I got the right result with the client tools, but I didn't get the right result with the browsers.<br class=""><br class="">When connecting 7443 port with the browsers, I get the HTTP/1.1 now.<br class="">When connecting 8443 port with the browsers, I get the HTTP/2 now.<br class=""></div></div></blockquote><div class=""><br class=""></div><div class="">The first request goes over HTTP/1, but then it’s supposed to switch to HTTP/3 if everything is right.</div><div class=""><br class=""></div><div class="">Does <a href="https://quic.nginx.org/" target="_blank" class="">https://quic.nginx.org/</a> detect QUIC support in your browsers?</div><div class="">If yes, please follow the ‘QUIC TEST’ link at the top and run the test.</div><div class=""><br class=""></div><div class="">Also, make sure QUIC/HTTP/3 is enabled in the browser.</div><div class="">In Firefox open the <a class="">about:config</a> page make sure http.http3.enabled parameter is ’true’.</div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class="">I hope any suggestions and help.<br class="">Thanks.<br class=""></div>
_______________________________________________<br class="">nginx-devel mailing list<br class=""><a href="mailto:nginx-devel@nginx.org" target="_blank" class="">nginx-devel@nginx.org</a><br class=""><a href="http://mailman.nginx.org/mailman/listinfo/nginx-devel" target="_blank" class="">http://mailman.nginx.org/mailman/listinfo/nginx-devel</a></div></blockquote></div><br class=""><div class="">
<div dir="auto" style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;" class=""><div dir="auto" style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; text-decoration: none;" class=""><div class="">—</div><div class="">Roman Arutyunyan</div><div class=""><a href="mailto:arut@nginx.com" target="_blank" class="">arut@nginx.com</a></div></div></div>
</div>
<br class=""></div>_______________________________________________<br class="">
nginx-devel mailing list<br class="">
<a href="mailto:nginx-devel@nginx.org" target="_blank" class="">nginx-devel@nginx.org</a><br class="">
<a href="http://mailman.nginx.org/mailman/listinfo/nginx-devel" rel="noreferrer" target="_blank" class="">http://mailman.nginx.org/mailman/listinfo/nginx-devel</a></blockquote></div>
_______________________________________________<br class="">nginx-devel mailing list<br class=""><a href="mailto:nginx-devel@nginx.org" class="">nginx-devel@nginx.org</a><br class="">http://mailman.nginx.org/mailman/listinfo/nginx-devel</div></blockquote></div><br class=""><div class="">
<div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div>—</div><div>Roman Arutyunyan</div><div><a href="mailto:arut@nginx.com" class="">arut@nginx.com</a></div></div></div>
</div>
<br class=""></body></html>