Mailing List Archive

Varnish 6.3, Hitch & HTTP/2
Dear varnish list,

I'm running varnish 6.3 and hitch as a TLS proxy

Does varnish 6.3 feature HTTP/2 support?
I think multiplexed streams in HTTP2 is something I'm looking for ;)

I see some documentation about 5.1 and progress on HTTP/2 support but
nothing about HTTP/2 for version 6.3

https://varnish-cache.org/docs/6.3/whats-new/changes-5.1.html#progress-on-http-2-support

Can I accomplish that with varnish 6.3 & hitch?
Is there some documentation sharing some insights on how to setup?

thanks for such a great piece of software.

greetings
Becki

_______________________________________________
varnish-misc mailing list
varnish-misc@varnish-cache.org
https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
Re: Varnish 6.3, Hitch & HTTP/2 [ In reply to ]
Hi there.

You need to enable the "http2" feature in varnish:
https://varnish-cache.org/docs/trunk/reference/varnishd.html#feature

either at runtime using "-p feature=+http2" in the varnishd command line,
or using "varnishadm param.set feature +http2" if varnish is already
running. Note that the varnishadm method won't survive a restart.
--
Guillaume Quintard


On Wed, Feb 5, 2020 at 12:03 AM Admin Beckspaced <admin@beckspaced.com>
wrote:

> Dear varnish list,
>
> I'm running varnish 6.3 and hitch as a TLS proxy
>
> Does varnish 6.3 feature HTTP/2 support?
> I think multiplexed streams in HTTP2 is something I'm looking for ;)
>
> I see some documentation about 5.1 and progress on HTTP/2 support but
> nothing about HTTP/2 for version 6.3
>
>
> https://varnish-cache.org/docs/6.3/whats-new/changes-5.1.html#progress-on-http-2-support
>
> Can I accomplish that with varnish 6.3 & hitch?
> Is there some documentation sharing some insights on how to setup?
>
> thanks for such a great piece of software.
>
> greetings
> Becki
>
> _______________________________________________
> varnish-misc mailing list
> varnish-misc@varnish-cache.org
> https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
>
Re: Varnish 6.3, Hitch & HTTP/2 [ In reply to ]
Hi Guillaume,

Thanks for your reply ;)

Is varnish http2 feature ready for a production server? Or is it still
experimental?

Would I need to setup Hitch for http2, too?

# Enable to let clients negotiate HTTP/2 with ALPN. (default off)
# alpn-protos = "http/2, http/1.1"

thanks & greetings
Becki

Am 05.02.2020 um 16:38 schrieb Guillaume Quintard:
> Hi there.
>
> You need to enable the "http2" feature in varnish:
> https://varnish-cache.org/docs/trunk/reference/varnishd.html#feature
>
> either at runtime using "-p feature=+http2" in the varnishd command
> line, or using "varnishadm param.set feature +http2" if varnish is
> already running. Note that the varnishadm method won't survive a restart.
> --
> Guillaume Quintard
>
>
> On Wed, Feb 5, 2020 at 12:03 AM Admin Beckspaced <admin@beckspaced.com
> <mailto:admin@beckspaced.com>> wrote:
>
> Dear varnish list,
>
> I'm running varnish 6.3 and hitch as a TLS proxy
>
> Does varnish 6.3 feature HTTP/2 support?
> I think multiplexed streams in HTTP2 is something I'm looking for ;)
>
> I see some documentation about 5.1 and progress on HTTP/2 support but
> nothing about HTTP/2 for version 6.3
>
> https://varnish-cache.org/docs/6.3/whats-new/changes-5.1.html#progress-on-http-2-support
>
> Can I accomplish that with varnish 6.3 & hitch?
> Is there some documentation sharing some insights on how to setup?
>
> thanks for such a great piece of software.
>
> greetings
> Becki
>
> _______________________________________________
> varnish-misc mailing list
> varnish-misc@varnish-cache.org <mailto:varnish-misc@varnish-cache.org>
> https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
>
Re: Varnish 6.3, Hitch & HTTP/2 [ In reply to ]
it's ready. And yes, I think you need to enable it on hitch too.
--
Guillaume Quintard


On Wed, Feb 5, 2020 at 9:03 AM Admin Beckspaced <admin@beckspaced.com>
wrote:

> Hi Guillaume,
>
> Thanks for your reply ;)
>
> Is varnish http2 feature ready for a production server? Or is it still
> experimental?
>
> Would I need to setup Hitch for http2, too?
>
> # Enable to let clients negotiate HTTP/2 with ALPN. (default off)
> # alpn-protos = "http/2, http/1.1"
>
> thanks & greetings
> Becki
>
> Am 05.02.2020 um 16:38 schrieb Guillaume Quintard:
>
> Hi there.
>
> You need to enable the "http2" feature in varnish:
> https://varnish-cache.org/docs/trunk/reference/varnishd.html#feature
>
> either at runtime using "-p feature=+http2" in the varnishd command line,
> or using "varnishadm param.set feature +http2" if varnish is already
> running. Note that the varnishadm method won't survive a restart.
> --
> Guillaume Quintard
>
>
> On Wed, Feb 5, 2020 at 12:03 AM Admin Beckspaced <admin@beckspaced.com>
> wrote:
>
>> Dear varnish list,
>>
>> I'm running varnish 6.3 and hitch as a TLS proxy
>>
>> Does varnish 6.3 feature HTTP/2 support?
>> I think multiplexed streams in HTTP2 is something I'm looking for ;)
>>
>> I see some documentation about 5.1 and progress on HTTP/2 support but
>> nothing about HTTP/2 for version 6.3
>>
>>
>> https://varnish-cache.org/docs/6.3/whats-new/changes-5.1.html#progress-on-http-2-support
>>
>> Can I accomplish that with varnish 6.3 & hitch?
>> Is there some documentation sharing some insights on how to setup?
>>
>> thanks for such a great piece of software.
>>
>> greetings
>> Becki
>>
>> _______________________________________________
>> varnish-misc mailing list
>> varnish-misc@varnish-cache.org
>> https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
>>
> _______________________________________________
> varnish-misc mailing list
> varnish-misc@varnish-cache.org
> https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
>
Re: Varnish 6.3, Hitch & HTTP/2 [ In reply to ]
Hello Guillaume,

thanks again for your reply

ok ... did enable hitch ALPN

alpn-protos = "http/2, http/1.1"

did enable http/2 in varnish.

I'm running opensuse and it has its configuration in /etc/sysnconfig/varnish

VARNISHD_PARAMS="-j unix,user=varnish -f /etc/varnish/main.vcl -a :80 -a
127.0.0.1:6086,PROXY -T localhost:6082 -s default=malloc,2G -s
static=file,/var/cache/varnish,5G -p feature=+http2"

which then is loaded via systemd service

[Service]
EnvironmentFile=/etc/sysconfig/varnish
PIDFile=/var/run/varnishd.pid
ExecStart=/usr/sbin/varnishd -P /var/run/varnishd.pid -F $VARNISHD_PARAMS

restart hitch & varnish

if I look in the logs all looks fine

Feb 06 10:07:12 cx40 systemd[1]: Starting hitch...
Feb 06 10:07:12 cx40 hitch[1238]: Trying to initialize SSL contexts with
your certificates
Feb 06 10:07:12 cx40 hitch[1238]: hitch configuration looks ok.
Feb 06 10:07:13 cx40 systemd[1]: Started hitch.

Feb 06 10:07:14 cx40 varnishd[1233]: Debug: Version: varnish-6.3.0
revision 0c9a93f1b2c6de49b8c6ec8cefd9d2be50041d79
Feb 06 10:07:14 cx40 varnishd[1233]: Debug: Platform:
Linux,4.12.14-lp151.28.36-default,x86_64,-junix,-smalloc,-sfile,-sdefault,-hcritbit
Feb 06 10:07:14 cx40 varnishd[1233]: Version: varnish-6.3.0 revision
0c9a93f1b2c6de49b8c6ec8cefd9d2be50041d79
Feb 06 10:07:14 cx40 varnishd[1233]: Platform:
Linux,4.12.14-lp151.28.36-default,x86_64,-junix,-smalloc,-sfile,-sdefault,-hcritbit
Feb 06 10:07:14 cx40 varnishd[1233]: Debug: Child (1619) Started
Feb 06 10:07:14 cx40 varnishd[1233]: Child (1619) Started
Feb 06 10:07:14 cx40 varnishd[1233]: Info: Child (1619) said Child starts
Feb 06 10:07:14 cx40 varnishd[1233]: Info: Child (1619) said SMF.static
mmap'ed 5368709120 bytes of 5368709120
Feb 06 10:07:14 cx40 varnishd[1233]: Child (1619) said Child starts
Feb 06 10:07:14 cx40 varnishd[1233]: Child (1619) said SMF.static
mmap'ed 5368709120 bytes of 5368709120
Feb 06 10:07:14 cx40 varnishncsa[742]: .................

if i then check if the website supports http/2

my website is https://kohphangannews.org/

https://tools.keycdn.com/http2-test

https://http2.pro/check?url=https%3A//kohphangannews.org/

it says that http/2 is not supported ;(

what am I missing?

thanks a lot for your time & help

Greetings
Becki



Am 05.02.2020 um 18:13 schrieb Guillaume Quintard:
> it's ready. And yes, I think you need to enable it on hitch too.
> --
> Guillaume Quintard
>
>
> On Wed, Feb 5, 2020 at 9:03 AM Admin Beckspaced <admin@beckspaced.com
> <mailto:admin@beckspaced.com>> wrote:
>
> Hi Guillaume,
>
> Thanks for your reply ;)
>
> Is varnish http2 feature ready for a production server? Or is it
> still experimental?
>
> Would I need to setup Hitch for http2, too?
>
> # Enable to let clients negotiate HTTP/2 with ALPN. (default off)
> # alpn-protos = "http/2, http/1.1"
>
> thanks & greetings
> Becki
>
Re: Varnish 6.3, Hitch & HTTP/2 [ In reply to ]
On Thu, Feb 6, 2020 at 9:50 AM Admin Beckspaced <admin@beckspaced.com> wrote:
>
> Hello Guillaume,
>
> thanks again for your reply
>
> ok ... did enable hitch ALPN
>
> alpn-protos = "http/2, http/1.1"
>
> did enable http/2 in varnish.
>
> I'm running opensuse and it has its configuration in /etc/sysnconfig/varnish
>
> VARNISHD_PARAMS="-j unix,user=varnish -f /etc/varnish/main.vcl -a :80 -a 127.0.0.1:6086,PROXY -T localhost:6082 -s default=malloc,2G -s static=file,/var/cache/varnish,5G -p feature=+http2"
>
> which then is loaded via systemd service
>
> [Service]
> EnvironmentFile=/etc/sysconfig/varnish
> PIDFile=/var/run/varnishd.pid
> ExecStart=/usr/sbin/varnishd -P /var/run/varnishd.pid -F $VARNISHD_PARAMS
>
> restart hitch & varnish
>
> if I look in the logs all looks fine
>
> Feb 06 10:07:12 cx40 systemd[1]: Starting hitch...
> Feb 06 10:07:12 cx40 hitch[1238]: Trying to initialize SSL contexts with your certificates
> Feb 06 10:07:12 cx40 hitch[1238]: hitch configuration looks ok.
> Feb 06 10:07:13 cx40 systemd[1]: Started hitch.
>
> Feb 06 10:07:14 cx40 varnishd[1233]: Debug: Version: varnish-6.3.0 revision 0c9a93f1b2c6de49b8c6ec8cefd9d2be50041d79
> Feb 06 10:07:14 cx40 varnishd[1233]: Debug: Platform: Linux,4.12.14-lp151.28.36-default,x86_64,-junix,-smalloc,-sfile,-sdefault,-hcritbit
> Feb 06 10:07:14 cx40 varnishd[1233]: Version: varnish-6.3.0 revision 0c9a93f1b2c6de49b8c6ec8cefd9d2be50041d79
> Feb 06 10:07:14 cx40 varnishd[1233]: Platform: Linux,4.12.14-lp151.28.36-default,x86_64,-junix,-smalloc,-sfile,-sdefault,-hcritbit
> Feb 06 10:07:14 cx40 varnishd[1233]: Debug: Child (1619) Started
> Feb 06 10:07:14 cx40 varnishd[1233]: Child (1619) Started
> Feb 06 10:07:14 cx40 varnishd[1233]: Info: Child (1619) said Child starts
> Feb 06 10:07:14 cx40 varnishd[1233]: Info: Child (1619) said SMF.static mmap'ed 5368709120 bytes of 5368709120
> Feb 06 10:07:14 cx40 varnishd[1233]: Child (1619) said Child starts
> Feb 06 10:07:14 cx40 varnishd[1233]: Child (1619) said SMF.static mmap'ed 5368709120 bytes of 5368709120
> Feb 06 10:07:14 cx40 varnishncsa[742]: .................
>
> if i then check if the website supports http/2
>
> my website is https://kohphangannews.org/
>
> https://tools.keycdn.com/http2-test
>
> https://http2.pro/check?url=https%3A//kohphangannews.org/
>
> it says that http/2 is not supported ;(
>
> what am I missing?

It's called h2 for ALPN, and with that I think you should be good.

Dridi
_______________________________________________
varnish-misc mailing list
varnish-misc@varnish-cache.org
https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
Re: Varnish 6.3, Hitch & HTTP/2 [ In reply to ]
Am 06.02.2020 um 12:11 schrieb Dridi Boukelmoune:
> On Thu, Feb 6, 2020 at 9:50 AM Admin Beckspaced <admin@beckspaced.com> wrote:
>> Hello Guillaume,
>>
>> thanks again for your reply
>>
>> ok ... did enable hitch ALPN
>>
>> alpn-protos = "http/2, http/1.1"
>>
> It's called h2 for ALPN, and with that I think you should be good.
>
> Dridi
Hello Dridi,

thanks a lot for that hint. Not sure how http/2 made it into the config?
changing to h2 finally did the trick and now http/2 is working with
varnish ;)

thanks & all the best wishes
Becki

_______________________________________________
varnish-misc mailing list
varnish-misc@varnish-cache.org
https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc