H2 with local proxy and then to the real backends?

[lukastribus]

You can terminate SSL directly on your TCP frontend, with ALPN et all. No need for a loopback backend.

You just need a backend that can do plaintext H2 (H2c). Nginx, Varnish and I’m pretty sure Apache should be able to do this.

See:

HTTP/2 SSL Offloading with Haproxy and Nginx • ISPIRE.ME

HTTP/2, varnish, nginx, haproxy, and mixing TCP/HTTP mode

I’ve been using HAProxy for SSL termination as part of a stack that looks like this: https http http Internet <-----> haproxy <----> varnish <----> nginx Everything works great, but adding HTTP/2 support has slammed me hard into a wall and I can’t figure a way out of it. I don’t want to jettison HAProxy in favor of Hitch, but I think I’m about to unless I can figure out some magical voodoo configuration options to get things working Problem, the short version: T…