Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: haproxy.org/server-ssl tip is misleading #637

Closed
Karitham opened this issue Mar 22, 2024 · 1 comment
Closed

docs: haproxy.org/server-ssl tip is misleading #637

Karitham opened this issue Mar 22, 2024 · 1 comment

Comments

@Karitham
Copy link

Hi, I was recently setting up a service that terminated tls by itself. I was having trouble and fucked around with this setting.

The tip says Enable HTTP/2 support for backend severs., which is surely not what this entries does.

- Enable HTTP/2 support for backend severs.

I still do not understand what it does so I can't fix it.

@ivanmatmati
Copy link
Collaborator

Hi @Karitham , Can you exactly explain what is misleading ?The tip says that it enables HTT2 support for backend servers which it does. If I take two examples without and with the annotation set, you've got:

backend XXXX
  mode http
  balance roundrobin
  option forwardfor
  no option abortonclose
  timeout server 50000
  default-server check
  server SRV_1 10.244.0.8:80 enabled
  server SRV_2 127.0.0.1:80 disabled
  server SRV_3 127.0.0.1:80 disabled
  server SRV_4 127.0.0.1:80 disabled

and

backend XXXX
  mode http
  balance roundrobin
  option forwardfor
  no option abortonclose
  timeout server 50000
  default-server check ssl alpn h2,http/1.1 verify none
  server SRV_1 10.244.0.8:80 enabled
  server SRV_2 127.0.0.1:80 disabled
  server SRV_3 127.0.0.1:80 disabled
  server SRV_4 127.0.0.1:80 disabled

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants