how to enable nginx QUIC HTTP/3?

Would you like to know how to enable http2 + quic in nginx?

I tried to do an installation here and got it using https://copr.fedorainfracloud.org/coprs/ryoh/nginx-quic/

meu nginx

Code: [Select]

# nginx -V
nginx version: nginx/1.21.0 (nginx-quic-1.21.0-1.el8.ac0398da8f23.88df13d73d5a74505f046f0bf37fb2fb3e1f1a58)
built with OpenSSL 1.1.1 (compatible; BoringSSL) (running with BoringSSL)
TLS SNI support enabled
configure arguments: --with-debug --with-cc-opt='-I../boringssl/include -O3 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -ftree-vectorize -flto=8 -ffat-lto-objects -fuse-ld=gold -fuse-linker-plugin -Wformat -Wno-strict-aliasing -Wno-stringop-truncation -DTCP_FASTOPEN=23' --with-ld-opt='-L../boringssl/build/ssl -L../boringssl/build/crypto -Wl,-z,relro -Wl,-E -lrt -ljemalloc -lpcre -flto=8 -fuse-ld=gold' --with-zlib=../cf-zlib --with-zlib-opt= --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/cache/nginx/client_body_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --build=nginx-quic-1.21.0-1.el8.ac0398da8f23.88df13d73d5a74505f046f0bf37fb2fb3e1f1a58 --with-threads --with-file-aio --with-libatomic --with-compat --with-pcre --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-http_v3_module --with-http_quic_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_auth_request_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_geoip_module=dynamic --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-stream_realip_module --with-stream_geoip_module --with-stream_quic_module --add-dynamic-module=../njs/nginx --add-dynamic-module=../ngx_brotli --add-dynamic-module=../ngx_http_geoip2_module --add-dynamic-module=../nginx-module-vts --add-dynamic-module=../echo-nginx-module --add-dynamic-module=../headers-more-nginx-module

I did a first test and it seems to be working but it is getting the certificate from the panel and not from vhost nginx


is someone already using it?

Would you like to know how to enable http2 + quic in nginx?
(...)
is someone already using it?

Cool!

This may be a site configuration problem.

Check you site is using correct templates, in CWP panel at "WebServer Settings -> WebServers Main Conf" for config all sites in your server, or "WebServer Settings -> WebServers Domain Conf" for a specific site config. These two menus rebuild configuration to use the correct certificate locations in your server.

Regards,
Netino