Nginx Official Nginx HTTP/3 QUIC Tech Preview announced

happyhacking · May 27, 2023

Already did a compilation of nginx with

Code:

NGINX_HPACK='y'                         
NGINX_HPACK_ALLOWED_VER='1025005'       
NGINX_DYNAMICTLS_ALLOWED_VER='1025005'  
NGINX_DYNAMICTLS='y'

but there are errors:

Code (Text):

1025000
/svr-setup /svr-setup/nginx-1.25.0 ~
/svr-setup/nginx-1.25.0 ~
/svr-setup/srcache-nginx-module-0.32 /svr-setup/nginx-1.25.0 ~
patching srcache-nginx-module
patch -p1 < /usr/local/src/centminmod/patches/srcache-nginx/srcache-nginx-1.23.0.patch
patching file .travis.yml
Hunk #1 FAILED at 25.
1 out of 1 hunk FAILED -- saving rejects to file .travis.yml.rej
patching file src/ngx_http_srcache_headers.c
patching file src/ngx_http_srcache_util.c

patching srcache-nginx-module for nginx 1.23.0+
/svr-setup/nginx-1.25.0 ~
1025000

./configure: error: invalid option "--with-http_v2_hpack_enc"

Error: 2, Nginx make failed

eva2000 · May 28, 2023

happyhacking said: ↑
Already did a compilation of nginx with
Code:
NGINX_HPACK='y'                        
NGINX_HPACK_ALLOWED_VER='1025005'      
NGINX_DYNAMICTLS_ALLOWED_VER='1025005' 
NGINX_DYNAMICTLS='y'                   
but there are errors:
Code (Text):
1025000
/svr-setup /svr-setup/nginx-1.25.0 ~
/svr-setup/nginx-1.25.0 ~
/svr-setup/srcache-nginx-module-0.32 /svr-setup/nginx-1.25.0 ~
patching srcache-nginx-module
patch -p1 < /usr/local/src/centminmod/patches/srcache-nginx/srcache-nginx-1.23.0.patch
patching file .travis.yml
Hunk #1 FAILED at 25.
1 out of 1 hunk FAILED -- saving rejects to file .travis.yml.rej
patching file src/ngx_http_srcache_headers.c
patching file src/ngx_http_srcache_util.c

patching srcache-nginx-module for nginx 1.23.0+
/svr-setup/nginx-1.25.0 ~
1025000

./configure: error: invalid option "--with-http_v2_hpack_enc"

Error: 2, Nginx make failed
Click to expand...
Centmin Mod 130.00beta01 defaults to NGINX_HPACK_ALLOWED_VER='1024005' meaning latest Nginx version that supports Nginx HTTP/2 full HPACK encoding patch is 1.24.5 max. You set 1.25.5 max and clearly HPACK patch isn't supported in Nginx 1.25 set it back to NGINX_HPACK_ALLOWED_VER='1024005' to allow Centmin Mod to skip enabling HPACK patch support for Nginx 1.25.x branch

happyhacking · May 28, 2023

eva2000 said: ↑

Centmin Mod 130.00beta01 defaults to NGINX_HPACK_ALLOWED_VER='1024005' meaning latest Nginx version that supports Nginx HTTP/2 full HPACK encoding patch is 1.24.5 max. You set 1.25.5 max and clearly HPACK patch isn't supported in Nginx 1.25 set it back to NGINX_HPACK_ALLOWED_VER='1024005' to allow Centmin Mod to skip enabling HPACK patch support for Nginx 1.25.x branch
Click to expand...

Thanks @eva2000 i guess i expected that everything worked fine on new release, rolled back to 1.24.0

eva2000 · May 30, 2023

Looks like Nginx 1.25.1 was released to master branch ~10hrs to fix HTTP/3 QUIC issue https://hg.nginx.org/nginx/shortlog/default

bug #2500 (After update to nginx 1.25 and configure vhost to enable http/3 quic error generated) – nginx

QUIC: fixed compat with ciphers other than AES128 (ticket #2500).

Previously, rec.level field was not uninitialized in SSL_provide_quic_data().
As a result, its value was always ssl_encryption_initial. Later in
ngx_quic_ciphers() such level resulted in resetting the cipher to
TLS1_3_CK_AES_128_GCM_SHA256 and using AES128 to encrypt the packet.

Now the level is initialized and the right cipher is used.
Click to expand...

Hence why Nginx folks say 1.25.0 is experimental for HTTP/3 QUIC support

nginx -V
nginx version: nginx/1.25.1 (290523-163553-almalinux8-f2701e4)
built by gcc 12.1.1 20220628 (Red Hat 12.1.1-3) (GCC)
built with OpenSSL 1.1.1t+quic 7 Feb 2023
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/opt/openssl-quic/lib -lssl -lcrypto -L/usr/local/zlib-cf/lib -L/usr/local/nginx-dep/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/opt/openssl-quic/lib:/usr/local/zlib-cf/lib:/usr/local/nginx-dep/lib -flto=12 -fuse-ld=gold' --with-cc-opt='-I/opt/openssl-quic/include -I/usr/local/zlib-cf/include -I/usr/local/nginx-dep/include -m64 -march=native -g -O3 -Wno-strict-aliasing -fstack-protector-strong -flto=12 -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wno-pointer-sign -fcode-hoisting -Wno-cast-function-type -Wno-format-extra-args -Wimplicit-fallthrough=0 -Wno-implicit-function-declaration -Wno-int-conversion -Wno-error=unused-result -Wno-unused-result -Wno-error=vla-parameter -Wp,-D_FORTIFY_SOURCE=2' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=290523-163553-almalinux8-f2701e4 --with-compat --without-pcre2 --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5.1 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.62 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.4.0-cmm --add-module=../memc-nginx-module-0.19 --add-module=../srcache-nginx-module-0.32 --add-dynamic-module=../headers-more-nginx-module-0.34 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-http_v3_module --with-http_v2_hpack_enc
Click to expand...
Code (Text):
curl --http3 -I https://domain.com
HTTP/3 200 
date: Mon, 29 May 2023 21:37:28 GMT
content-type: text/html; charset=utf-8
content-length: 6416
last-modified: Sat, 20 May 2023 21:18:27 GMT
vary: accept-encoding
etag: "64693923-1910"
server: nginx centminmod
x-powered-by: centminmod
alt-svc: h3=":443"; ma=86400
x-protocol: HTTP/3.0
accept-ranges: bytes

buik · Jun 13, 2023

eva2000 said: ↑

Yup
Click to expand...

Server push on HTTP/2 is also removed.

eva2000 · Jun 13, 2023

buik said: ↑

Server push on HTTP/2 is also removed.
Click to expand...

Yup saw that. In next nginx 1.25.1 they're also deprecating http2 flag in listener directive and adding separate http2 directive for on/off for HTTP/2 support https://hg.nginx.org/nginx/rev/08ef02ad5c54. Luckily, it still works in 1.25.1, just they are giving a warning for deprecation when running nginx -t config test command. Currently, testing a routine to detect nginx 1.25.1+ and auto modify all Centmin Mod HTTPS nginx vhosts and also auto revert back if detected nginx <=1.25.0

eva2000 · Jun 14, 2023

eva2000 said: ↑

Yup saw that. In next nginx 1.25.1 they're also deprecating http2 flag in listener directive and adding separate http2 directive for on/off for HTTP/2 support https://hg.nginx.org/nginx/rev/08ef02ad5c54. Luckily, it still works in 1.25.1, just they are giving a warning for deprecation when running nginx -t config test command. Currently, testing a routine to detect nginx 1.25.1+ and auto modify all Centmin Mod HTTPS nginx vhosts and also auto revert back if detected nginx <=1.25.0
Click to expand...

Nginx 1.25.1 just released so updated Centmin Mod 130.00beta01's centmin.sh menu option 4 nginx upgrade/downgrade routine to auto switch between the 2 supported http2 parameter (<=1.25.0) and http2 directive (>=1.25.1) methods https://community.centminmod.com/th...tive-change-in-130-00beta01.23888/#post-96496

rdan · Oct 25, 2023

Using HTTP3 on live site not using CF, with these configs only:
Code:
listen      443 quic reuseport;
listen [::]:443 quic reuseport;
add_header Alt-Svc 'h3=":443"; ma=86400';

rdan · Oct 25, 2023

rdan said: ↑

Oh s....
Just an update, with that Nginx-Quic installed.
Serving large video files is a lot slower to users, like 2-3x slower compare to the mainline version.
Click to expand...

Related comment:

This implementation of QUIC still does not use BBR for cognition control. Because of this, we get a low speed of downloading files. Can't be used for production.
Click to expand...

https://www.nginx.com/blog/binary-p...quic-http3-implementation/#comment-6186059344

eva2000 · Oct 25, 2023

rdan said: ↑

Related comment:

https://www.nginx.com/blog/binary-p...quic-http3-implementation/#comment-6186059344
Click to expand...

Yeah Nginx's HTTP/3 QUIC implementation still needs work

Log in / Register

Forums

Want to subscribe to topics you're interested in?

Nginx Official Nginx HTTP/3 QUIC Tech Preview announced

happyhacking Member

eva2000 Administrator Staff Member

happyhacking Member

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

rdan Well-Known Member

rdan Well-Known Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Want to subscribe to topics you're interested in?

Nginx Official Nginx HTTP/3 QUIC Tech Preview announced

happyhacking Member

eva2000 Administrator Staff Member

happyhacking Member

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

rdan Well-Known Member

rdan Well-Known Member

eva2000 Administrator Staff Member

.