Welcome! Log In Create A New Profile

Advanced

Enable http3 for a subset of domains

Riccardo Brunetti Host
June 26, 2024 10:16AM
Hello.

I have a Nginx server which acts as a reverse proxy for a given number of different domains and I’m trying to enable http3 for a subset of them.

I placed the directives:

> http3 on;
> listen xx.xx.xx.xx:443 default_server quic reuseport;
> quic_retry on;

in the default.conf file and then, only for those domains which I want http3 enabled I also add in the corresponding virtual host:

> http3 on;
> listen xx.xx.xx.xx:443 quic;
> quic_retry on;

In the server section and

> add_header Alt-Svc 'h3=":8443"; ma=86400';

Inside the location.

Now, what happens is that if I try to open the sites *with* http3 enabled, everything works as expected. If I try to open a site *without* http3 enabled, sometimes I have an SSL error because the server returns the “default virtual host” certificate.
It seems related to the type of browser.

Is it an expected behaviour or I am doing something wrong with the server configuration?

Nginx version: nginx/1.26.1 on ubuntu 22.04

Thanks.
Riccardo_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Enable http3 for a subset of domains

Riccardo Brunetti Host June 26, 2024 10:16AM

Re: Enable http3 for a subset of domains

Roman Arutyunyan June 26, 2024 10:48AM

Re: Enable http3 for a subset of domains

Riccardo Brunetti Host June 26, 2024 11:22AM

Re: Enable http3 for a subset of domains

Roman Arutyunyan June 26, 2024 11:58AM

Re: Enable http3 for a subset of domains

Riccardo Brunetti Host June 27, 2024 02:18AM

Re: Enable http3 for a subset of domains

Roman Arutyunyan June 27, 2024 06:28AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 165
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready