You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When dnsdist uses nghttp2 as a http(s) lib, it does not accept HTTP/1. This has the consequence that when dnsdist is configured to use clear-text incoming DoH sdig cannot query it, as defaults to use ALPN, which does not work. Remedy is to set:
in minicurl.cc. It remains to be decided if that should be an option to sdig or if we should set that always (which would break HTTP/1 DoH connections, but those are fishy anyway).
The text was updated successfully, but these errors were encountered:
rgacogne
changed the title
sdig: allow cleartext DoH to work when dnsdist is using nginx2 as lib
sdig: allow cleartext DoH to work when dnsdist is using nghttp2 as lib
Apr 25, 2024
sdig is not the only user of minicurl - LUA records ifurlup and friends rely on it as well, and maybe rec zoneToCache too? we need to make sure we don't break any of those
When
dnsdist
usesnghttp2
as a http(s) lib, it does not accept HTTP/1. This has the consequence that whendnsdist
is configured to use clear-text incoming DoHsdig
cannot query it, as defaults to use ALPN, which does not work. Remedy is to set:in
minicurl.cc
. It remains to be decided if that should be an option tosdig
or if we should set that always (which would break HTTP/1 DoH connections, but those are fishy anyway).The text was updated successfully, but these errors were encountered: