Test HTTP/3 now!

Question

Nginx 1.25.0 mainline version has been released, featuring experimental HTTP/3 support.

How to test with Webinoly:

• Install Webinoly using the "clean" option: wget -qO weby qrok.es/wy && sudo bash weby -clean
• Set the Nginx "mainline" branch in the Webinoly configuration file: sudo nano /opt/webinoly/webinoly.conf
• Install Nginx and LEMP: sudo stack -lemp
• Create a new site: sudo site example.com -wp
• Add an SSL cert to your site: sudo site example.com -ssl=on
• Add a new listen directive with the quic parameter:

sudo nano /etc/nginx/sites-available/example.com

# Include QUIC support:
listen 443 ssl http2;
listen 443 quic reuseport; # QUIC
listen [::]:443 ssl http2;

• Add a response header telling the browser that an upgrade to QUIC is available.

# Add a custom http header to Webinoly
sudo nano /opt/webinoly/templates/source/custom_header_https_webinoly.data

# Include this two lines:
add_header Alt-Svc 'h3=":$server_port"; ma=86400';
add_header X-protocol $server_protocol always;

# Reload the HTTP headers in Webinoly to changes take effect:
sudo webinoly -custom-headers=reload

• Test it here: https://http3check.net/

And that it! Easy, right?

References: https://www.nginx.com/blog/binary-packages-for-preview-nginx-quic-http3-implementation/

Comments

By the way, it will be included natively for sure in Webinoly.

Right now, it's considered an experimental feature, but we hope once Nginx 1.26.0 "Stable" is released next year (2024), it will be included by default in Webinoly.

---

Very cool! I started using webinoly very recently on my new server, I'm liking it so far. 

I had a little bit of trouble getting HTTP3 to work but after reading the referenced nginx blog I noticed http3 needs to accept traffic over UDP. After adding 443/udp to my firewall it instantly functioned. 

By the way, I was getting a deprecation warning:

nginx: [warn] the "listen ... http2" directive is deprecated, use the "http2" directive instead in /etc/nginx/sites-enabled/

# This is old
listen 443 ssl http2;
listen 443 quic reuseport; # QUIC
listen [::]:443 ssl http2;

# Should be
listen 443 ssl;
listen 443 quic reuseport; # QUIC
listen [::]:443 ssl;
http2 on;

Answer 1

Solution is already included in the question for community interest.