Kristian Klausen 8dfa7e8c3e nginx: Add plumbing for enabling HTTP/3 conditionally ... We want to roll out HTTP/3 slowly, so this adds the necessary plumbing and makes it possible to enable it per host. Instead of adding the conditional logic to each nginx template, the 443 listen config is moved out into a snippet which is managed by the nginx role. HTTP/3 uses QUIC which is built on UDP. UDP is connectionless and therefore reuseport[1][2] must be used to ensure that UDP packets for the same QUIC connection is directed to the same worker. reuseport can only be enabled once, so a default_server is added to the "inventory_hostname vhost" for SSL/QUIC (reuseport is only enabled for the latter). ssl_reject_handshake[3] is enabled as that allows enabling SSL/QUIC without specifying a certificate. [1] https://nginx.org/en/docs/http/ngx_http_core_module.html#listen [2] https://lwn.net/Articles/542629/ [3] http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_reject_handshake Ref #606		2024-08-17 21:53:32 +02:00
..
defaults	Make the lists.al.org VPS the new lists server	2021-06-30 09:30:31 +00:00
tasks	Capitalize the handler name in handler invocations	2022-08-29 21:46:39 +03:00
templates	nginx: Add plumbing for enabling HTTP/3 conditionally	2024-08-17 21:53:32 +02:00