Package: nginx
Severity: normal
X-Debbugs-Cc: [email protected]

Dear Maintainer,

The file proxy_params should use the variable $host instead of
$http_host for the header Host. As written in the nginx documentation :

However, if this field is not present in a client request header then
nothing will be passed. In such a case it is better to use the $host
variable - its value equals the server name in the “Host” request header
field or the primary server name if this field is not present

Currently, HTTP/3 is broken with a HTTP/1.1 backend. As there is no Host
header in HTTP/3 (the name is sent during the negociation and not as a
header), the backend is refusing the request.

Changing $http_host with $host resolves the issue, and is more
futureproof.

Thanks

-- System Information:
Debian Release: forky/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.18.5+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages nginx depends on:
ii  libc6         2.42-11+b1
ii  libcrypt1     1:4.5.1-1
ii  libpcre2-8-0  10.46-1+b1
ii  libssl3t64    3.5.5-1
pn  nginx-common  <none>
ii  zlib1g        1:1.3.dfsg+really1.3.1-2

nginx recommends no packages.

nginx suggests no packages.

Reply via email to