Skip to content

fix(axum-kbve): force HTTP/1.1 on ArgoCD proxy to prevent ALPN h2 hang#8000

Merged
h0lybyte merged 1 commit intodevfrom
trunk/arc-autoscale-1773553853
Mar 15, 2026
Merged

fix(axum-kbve): force HTTP/1.1 on ArgoCD proxy to prevent ALPN h2 hang#8000
h0lybyte merged 1 commit intodevfrom
trunk/arc-autoscale-1773553853

Conversation

@h0lybyte
Copy link
Member

Summary

  • Add .http1_only() to the ArgoCD proxy reqwest client builder
  • rustls was negotiating HTTP/2 via ALPN with ArgoCD, routing the connection to gRPC instead of the REST API, causing the proxy to hang silently and return 502
  • Grafana proxy was unaffected because it uses plain HTTP (no TLS/ALPN)
  • TLS, CA cert verification, and encryption remain fully intact

Test plan

  • Deploy and verify kbve.com/dashboard/argo/proxy/api/v1/applications returns ArgoCD data instead of 502
  • Verify Grafana proxy still works at kbve.com/dashboard/grafana/proxy/

rustls negotiates HTTP/2 via ALPN with ArgoCD, which routes the
connection to its gRPC handler instead of the REST API. The proxy
sends HTTP/1.1 requests, causing the connection to stall silently.
@github-actions
Copy link
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@h0lybyte h0lybyte merged commit 04cdce1 into dev Mar 15, 2026
5 checks passed
@h0lybyte h0lybyte deleted the trunk/arc-autoscale-1773553853 branch March 15, 2026 06:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant