Hi Aleks,
On Wed, Jan 23, 2019 at 06:58:25PM +0100, Aleksandar Lazic wrote:
> backend be_generic_tcp
> mode http
> balance source
> timeout check 5s
> option tcp-check
>
> server "${SERVICE_NAME}" ${SERVICE_DEST_IP}:${SERVICE_DEST_PORT} check
> inter 5s proto h2 ssl ssl-min-ver TLSv1.3 verify none
You need to replace "proto h2" with "alpn h2", so that the application
protocol is announced to the other host, otherwise it will stick to the
default, very likely "http/1.1", while haproxy talks h2 there. This can
explain the 502 when the other side rejected your request.
Willy
