> Observed nginx's version 1.22.1 questionable behaviour with two virtual hosts, one with H2 - enabled, second without http2 support.
> Both on the same IP and port, with different domain names/server names.
>
> Is it a bug, feature, my misconfiguration or just not needed by anyone?

The short answer is - yes it is supposed to be like that and you would need either to use different ports or different ips for the virtual hosts.

If I'm not wrong the longer answer is that nginx groups all the capabilities for ip:port when listening on it and since the http2 selection happens at TLS handshake but the virtual server selection happens later at SNI it's problematic to switch it off at that phase.


There have been couple similar requests/questions in past (mainly for specific cipher configuration per virtual server) but out of interest - what is the reason/use case for disabling http2 for a particular virtualhost but leaving it for others?

rr

_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx