So from what I can find, mode http and alpn h2 are not supported together?
alpn h2 is only supported with mode tcp? I get no errors with my config, so
I don't know what is unsupported.
I need mode http so I can insert cookies and do other things not supported
in mode tcp.
If someone could give me a definitive yes or no, i would be most grateful.
If mode http and alpn h2 aren't supported together, do we know if any
release in the near future will support it? I thought it was coming in 1.7
but I can't find any documentation on it.
Thanks!
~Matt
On Thu, Mar 16, 2017 at 12:00 PM, Matt Jamison <m...@tblinux.com> wrote:
> I compiled openssl 1.0.2k, then compiled haproxy 1.7.3 against it but alpn
> and h2 just seem to not working right.
>
> [root@proxy01 ~]# haproxy -vv
> HA-Proxy version 1.7.3 2017/02/28
> Copyright 2000-2017 Willy Tarreau <wi...@haproxy.org>
>
> Build options :
> TARGET = linux2628
> CPU = generic
> CC = gcc
> CFLAGS = -O2 -g -fno-strict-aliasing -Wdeclaration-after-statement
> OPTIONS = USE_LINUX_TPROXY=1 USE_ZLIB=1 USE_REGPARM=1 USE_OPENSSL=1
> USE_PCRE=1 USE_PCRE_JIT=1
>
> Default settings :
> maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
>
> Encrypted password support via crypt(3): yes
> Built with zlib version : 1.2.7
> Running on zlib version : 1.2.7
> Compression algorithms supported : identity("identity"),
> deflate("deflate"), raw-deflate("deflate"), gzip("gzip")
> Built with OpenSSL version : OpenSSL 1.0.2k 26 Jan 2017
> Running on OpenSSL version : OpenSSL 1.0.2k 26 Jan 2017
> OpenSSL library supports TLS extensions : yes
> OpenSSL library supports SNI : yes
> OpenSSL library supports prefer-server-ciphers : yes
> Built with PCRE version : 8.32 2012-11-30
> Running on PCRE version : 8.32 2012-11-30
> PCRE library supports JIT : yes
> Built without Lua support
> Built with transparent proxy support using: IP_TRANSPARENT
> IPV6_TRANSPARENT IP_FREEBIND
>
> Available polling systems :
> epoll : pref=300, test result OK
> poll : pref=200, test result OK
> select : pref=150, test result OK
> Total: 3 (3 usable), will use epoll.
>
> Available filters :
> [COMP] compression
> [TRACE] trace
> [SPOE] spoe
>
>
> When I have alpn and h2 set on the bind line, no requests can get past the
> frontend. I disabled all back ends so that at least the 503 error page I
> have set would come up but no go.
>
> If I remove h2 , it works just fine with http/1.1.
>
> Syslog shows BADREQ coming in.
>
> I attached my haproxy.cfg.
>
> Am I doing something wrong?
>
> Any help would be super appreciated.
>
>
> ~Matt
>
