QUIC and HTTP/3 roadmap blog post
Raminda Subashana
iwaraminda at googlemail.com
Wed Jul 14 10:39:45 UTC 2021
Hi Vladimir,
Please see below; details & herewith attached another detail report as a
PDF. I tested with Magento 2.4.2 & below results based on it. PHP 7.4 on
Ubuntu 20.04 LTS
*Nginx 1.16.1 (Cloudflare Quic)*
Virtual Host Config;
upstream fastcgi_backend {
server unix:/run/php/php7.4-fpm.sock;
}
server {
listen 80;
server_name xxxxx.com;
set $MAGE_ROOT /var/www/html/app1/public_html;
include /var/www/html/app1/public_html/nginx.conf.sample;
listen 443 quic reuseport;
listen 443 ssl http2;
# listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/app1.wernos.com/fullchain.pem; #
managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/app1.wernos.com/privkey.pem;
# managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
add_header alt-svc 'h3=":443"; ma=86400';
}
[image: image.png]
[image: image.png]
*Nginx-quic*
Virtual Host config;
upstream fastcgi_backend {
server unix:/run/php/php7.4-fpm.sock;
}
server {
listen 80;
server_name xxxxxx.com;
set $MAGE_ROOT /var/www/html/app1/public_html;
include /var/www/html/app1/public_html/nginx.conf.sample;
listen 443 ssl; # TCP listener for HTTP/1.1
listen 443 http3 reuseport; # UDP listener for QUIC+HTTP/3
ssl_protocols TLSv1.3; # QUIC requires TLS 1.3
# listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/app2.wernos.com/fullchain.pem; #
managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/app2.wernos.com/privkey.pem;
# managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
add_header Alt-Svc 'h3=":443"'; # Advertise that HTTP/3 is available
add_header QUIC-Status $quic; # Sent when QUIC was used
}
[image: image.png]
[image: image.png]
Herewith attached nginx.conf too.
On Tue, Jul 13, 2021 at 7:54 PM Raminda Subashana <iwaraminda at googlemail.com>
wrote:
> Hi Vladimir,
>
> Sure I'll share all the information.
>
> Thanks
>
> On Tue, Jul 13, 2021 at 6:44 PM Vladimir Homutov <vl at nginx.com> wrote:
>
>> On Tue, Jul 13, 2021 at 05:29:15PM +0530, Raminda Subashana wrote:
>> > Hi Maxim,
>> >
>> > Just tested nginx-quic release and there is a performance issue. I
>> compared
>> > it with Cloudflare quic experimental release which is based on nginx
>> 1.16.
>> >
>> > It is almost 3 times slower than 1.16. Below config worked for me and it
>> > never advertised h3-29. if you have specific config file to test
>> appreciate
>> > if you can share
>> >
>> > server {
>> > listen 443 ssl; # TCP listener for HTTP/1.1
>> > listen 443 http3 reuseport; # UDP listener for QUIC+HTTP/3
>> >
>> > ssl_protocols TLSv1.3; # QUIC requires TLS 1.3
>> > ssl_certificate ssl/www.example.com.crt;
>> > ssl_certificate_key ssl/www.example.com.key;
>> >
>> > add_header Alt-Svc 'h3=":443"'; # Advertise that HTTP/3 is
>> available
>> > add_header QUIC-Status $quic; # Sent when QUIC was used
>> > }
>>
>> Hi Raminda,
>>
>> Can you please describe how do you measure performance? What clients do
>> you use? Full nginx configuration would be nice to see also.
>> Do you measure request time or maybe overall throughput or something
>> else. Any details are appreciated.
>>
>> Please ensure that for perforamnce tests you use nginx built without
>> debug,
>> as it produces quite a lot messages if built in debug mode.
>>
>>
>> _______________________________________________
>> nginx mailing list
>> nginx at nginx.org
>> http://mailman.nginx.org/mailman/listinfo/nginx
>>
>
>
> --
>
> Thanks & Regards,
>
> *Raminda Subhashana*
>
> Mobile : 0773482137
>
>
>
>
>
> *Please consider the environmental impact of needlessly printing this
> e-mail.*
>
--
Thanks & Regards,
*Raminda Subhashana*
Mobile : 0773482137
*Please consider the environmental impact of needlessly printing this
e-mail.*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 32487 bytes
Desc: not available
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 29971 bytes
Desc: not available
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 35378 bytes
Desc: not available
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 34381 bytes
Desc: not available
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nginx-quic_compressed.pdf
Type: application/pdf
Size: 204203 bytes
Desc: not available
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0002.pdf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nginx.conf
Type: application/octet-stream
Size: 1491 bytes
Desc: not available
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nginx-1.16.1_compressed.pdf
Type: application/pdf
Size: 203387 bytes
Desc: not available
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20210714/3e35f01a/attachment-0003.pdf>
More information about the nginx
mailing list