Nginx mainline added (experimental) http3/quic support with version 1.25 in late May. Is there any interest in adding support to our nginx-mainline package? It can be optionally turned on in server config, so having it compiled in and available shouldn't have any impact until it's activated by changing the web server configs. I confirmed this with my web servers. I've been running this for a while now (even before the quic branch was merged into mainline) and it has been working well both with and without http3. Since quic uses udp, I did need to change the firewall to allow udp in addition to tcp for the web servers on port 443. In case of interest, here's what I did to build and get it running. Since openssl doesn't support quic, nginx provides for some alternatives; quictls, boringssl or libressl. I chose to use quictls. Since quictls is openssl plus quic support, I want to be sure it did not interfere in any way with the default Arch openssl libraries or binaries. So, I made a quictls package which installed into it's own tree not in /usr or /usr/local. I chose to use /usr/local/quictls/. This keeps the binaries in and libraries away from all normal paths while making the libraries readily available for nginx. I imagine there are other approaches to dealing with this. Once quictls was built and installed it is quite simple to use it to add quic support to the nginx-mainline package. As always, thanks to those keeping Arch vibrant and at the leading edge. gene
On 6/29/23 07:16, Genes Lists wrote: Actually the cleanest and simplest way is to use libressl which is already nicely packaged in in repo. Don't know how I missed this earlier - I will build and test. gene
On 6/29/23 08:06, Genes Lists wrote:
On 6/29/23 07:16, Genes Lists wrote:
Actually the cleanest and simplest way is to use libressl which is ... - I will build and test.
Very simple to build with libressl - preliminary testing nginx working fine for both http/2 and http/3. Be good to have quic in the official nginx-mainline. gene
On Thu, Jun 29, 2023 at 08:33:15 -0400, Genes Lists wrote:
On 6/29/23 08:06, Genes Lists wrote:
On 6/29/23 07:16, Genes Lists wrote:
Actually the cleanest and simplest way is to use libressl which is ... - I will build and test.
Very simple to build with libressl - preliminary testing nginx working fine for both http/2 and http/3.
Be good to have quic in the official nginx-mainline.
gene
Both QUIC and http/3 are already enabled in nginx-mainline, with openssl. https://gitlab.archlinux.org/archlinux/packaging/packages/nginx-mainline/-/c... I'm using it. Only some specific features like early data are not (yet) supported with openssl. Geert
On 6/29/23 07:16, Genes Lists wrote:
Nginx mainline added (experimental) http3/quic support with version 1.25
Seems our nginx-mainline does have '--with-http_v3_module' together with openssl. So it should mostly work as is. Missed that as well - must need more coffee ... gene
participants (2)
-
Geert Hendrickx
-
Genes Lists