haproxy-ingress icon indicating copy to clipboard operation
haproxy-ingress copied to clipboard

Support h2 protocol without ssl

Open thyn opened this issue 5 years ago • 5 comments

Haproxy support h2 without ssl on front. It disables http1. Is it possible to add setting to specify h2 protocol on frontend? Didn't find any setting inside template (v 0.10, v.011)

thyn avatar Oct 24 '20 08:10 thyn

You can use https://haproxy-ingress.github.io/docs/configuration/keys/#configuration-snippet options to configure most things that are not covered by explicit configuration keys.

Unichron avatar Oct 26 '20 16:10 Unichron

You can use https://haproxy-ingress.github.io/docs/configuration/keys/#configuration-snippet options to configure most things that are not covered by explicit configuration keys.

I didn't find there how to append to bind attribute h2. Also i've checked template file - there was no any possibility to modify that setting. I've edited template by myself. But ,I just ask to have that option too

thyn avatar Oct 26 '20 17:10 thyn

You can hack the configuration adding eg :80 proto h2 in the bind-http config key. This will copied verbatim to the final config. bind-http doc here and haproxy's bind doc here.

jcmoraisjr avatar Oct 26 '20 17:10 jcmoraisjr

I'm considering to add a "proto" or at least a "custom-bind" config key in order to properly support and document such option.

jcmoraisjr avatar Oct 26 '20 17:10 jcmoraisjr

+1 for "custom-bind", i had the same problem with strict-sni in the past, and only found out i can hack the bind-https by looking at the source

Unichron avatar Oct 26 '20 17:10 Unichron