Hello! On Wed, Apr 03, 2013 at 03:16:14PM -0700, Piotr Sikora wrote:
> Hey Maxim, > > > Do we care? I think it's ok to assume HTTP by default, even if a > > client sent something different from what we've advertised. > > I'm not sure about you, but I do. I don't see a point in trying to > process something that is known to fail down the line... Especially, > if it produces noise in the logs. > > Right now, forced SPDY/3 request is logged like that: > > access.log: > 127.0.0.1 - - [03/Apr/2013:14:05:10 -0700] > "\x80\x03\x00\x01\x01\x00\x00\xDB\x00\x00\x00\x01\x00\x00\x00\x00`\x0080\xE3\xC6\xA7\xC2\x00\xC1\x00>\xFF\x00\x00\x00\x08\x00\x00\x00\x05:host\x00\x00\x00\x10example.net:7070\x00\x00\x00\x07:method\x00\x00\x00\x03GET\x00\x00\x00\x05:path\x00\x00\x00\x01/\x00\x00\x00\x07:scheme\x00\x00\x00\x05https\x00\x00\x00\x08:version\x00\x00\x00\x08HTTP/1.1\x00\x00\x00\x06accept\x00\x00\x00\x03*/*\x00\x00\x00\x0Faccept-encoding\x00\x00\x00" > 400 189 "-" "-" > > error.log: > 2013/04/03 14:05:10 [info] 54833#0: *4 client sent invalid method > while reading client request line, client: 127.0.0.1, server: _, > request: > "?`80??>:hostexample.net:7070:methodGET:path/:schemehttp:versioHTTP/1.1accept*/*accept-encoding" > > vs patched: > > error.log: > 2013/04/03 14:08:59 [error] 55828#0: *1 client negotiated unsupported > protocol "spdy/3" while SSL handshaking, client: 127.0.0.1, server: > 0.0.0.0:7070 As long as this is something _forced_ and doesn't happen as normal behaviour of some clients, I would rather preserve current behaviour. For me it looks better to assume HTTP for something which is not HTTP rather than reject HTTP which e.g. happened to be hardcoded to claim HTTP/1.0 instead of HTTP/1.1 we advertise. If "spdy/3" happens to generate too much noise in logs as observed in real life - we may consider blocking it specifically. -- Maxim Dounin http://nginx.org/en/donation.html _______________________________________________ nginx-devel mailing list nginx-devel@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx-devel
