Hi,
I'm trying to enable http2 on a frontend, I added:
bind x.x.x.x:443 ssl crt /etc/ssl/private/letsencrypt_staging.pem alpn
h2,http/1.1
I get a ERR_SPDY_PROTOCOL_ERROR when browsing the site.
Chrome net-internals log:
t=580016 [st=7] -HTTP_TRANSACTION_SEND_REQUEST
t=580016 [st=7] +HTTP_TRANSACTION_READ_HEADERS [dt=1]
t=580017 [st=8] HTTP2_STREAM_ERROR
--> description = "Server reset stream with error
INTERNAL_ERROR."
--> net_error = "ERR_SPDY_PROTOCOL_ERROR"
--> stream_id = 3
curl -I --http2 https://my_website
curl: (92) HTTP/2 stream 1 was not closed cleanly: INTERNAL_ERROR (err 2)
Haproxy log:
staging~ staging_servers/web003 0/0/-1/-1/0 503 1164 - - CC-- 1/1/0/0/0 0/0 {}
"GET / HTTP/1.1"
haproxy -vv
HA-Proxy version 1.8.0-2~bpo8+1 2017/12/02
Copyright 2000-2017 Willy Tarreau <[email protected]>
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -g -O2 -fPIE -fstack-protector-strong -Wformat
-Werror=format-security -D_FORTIFY_SOURCE=2
OPTIONS = USE_GETADDRINFO=1 USE_ZLIB=1 USE_REGPARM=1 USE_OPENSSL=1 USE_LUA=1
USE_SYSTEMD=1 USE_PCRE=1 USE_NS=1
Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 1024, maxpollevents = 200
Built with OpenSSL version : OpenSSL 1.0.2l 25 May 2017
Running on OpenSSL version : OpenSSL 1.0.2l 25 May 2017
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports : TLSv1.0 TLSv1.1 TLSv1.2
Built with Lua version : Lua 5.3.3
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT
IP_FREEBIND
Encrypted password support via crypt(3): yes
Built with multi-threading support.
Built with PCRE version : 8.35 2014-04-04
Running on PCRE version : 8.35 2014-04-04
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built with zlib version : 1.2.8
Running on zlib version : 1.2.8
Compression algorithms supported : identity("identity"), deflate("deflate"),
raw-deflate("deflate"), gzip("gzip")
Built with network namespace support.
