Author Topic: how to enable nginx QUIC HTTP/3?  (Read 3925 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
how to enable nginx QUIC HTTP/3?
« on: December 05, 2021, 10:24:55 PM »
Would you like to know how to enable http2 + quic in nginx?

I tried to do an installation here and got it using https://copr.fedorainfracloud.org/coprs/ryoh/nginx-quic/

meu nginx

Code: [Select]
# nginx -V
nginx version: nginx/1.21.0 (nginx-quic-1.21.0-1.el8.ac0398da8f23.88df13d73d5a74505f046f0bf37fb2fb3e1f1a58)
built with OpenSSL 1.1.1 (compatible; BoringSSL) (running with BoringSSL)
TLS SNI support enabled
configure arguments: --with-debug --with-cc-opt='-I../boringssl/include -O3 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -ftree-vectorize -flto=8 -ffat-lto-objects -fuse-ld=gold -fuse-linker-plugin -Wformat -Wno-strict-aliasing -Wno-stringop-truncation -DTCP_FASTOPEN=23' --with-ld-opt='-L../boringssl/build/ssl -L../boringssl/build/crypto -Wl,-z,relro -Wl,-E -lrt -ljemalloc -lpcre -flto=8 -fuse-ld=gold' --with-zlib=../cf-zlib --with-zlib-opt= --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/cache/nginx/client_body_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --build=nginx-quic-1.21.0-1.el8.ac0398da8f23.88df13d73d5a74505f046f0bf37fb2fb3e1f1a58 --with-threads --with-file-aio --with-libatomic --with-compat --with-pcre --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-http_v3_module --with-http_quic_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_auth_request_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_geoip_module=dynamic --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-stream_realip_module --with-stream_geoip_module --with-stream_quic_module --add-dynamic-module=../njs/nginx --add-dynamic-module=../ngx_brotli --add-dynamic-module=../ngx_http_geoip2_module --add-dynamic-module=../nginx-module-vts --add-dynamic-module=../echo-nginx-module --add-dynamic-module=../headers-more-nginx-module

I did a first test and it seems to be working but it is getting the certificate from the panel and not from vhost nginx


is someone already using it?

Offline
***
Re: how to enable nginx QUIC HTTP/3?
« Reply #1 on: December 09, 2021, 11:08:30 PM »
Would you like to know how to enable http2 + quic in nginx?
(...)
is someone already using it?

Cool!

This may be a site configuration problem.

Check you site is using correct templates, in CWP panel at "WebServer Settings -> WebServers Main Conf" for config all sites in your server, or "WebServer Settings -> WebServers Domain Conf" for a specific site config. These two menus rebuild configuration to use the correct certificate locations in your server.

Regards,
Netino