Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mod_http2: implement ORIGIN frames #96

Open
icing opened this issue Mar 31, 2016 · 1 comment
Open

mod_http2: implement ORIGIN frames #96

icing opened this issue Mar 31, 2016 · 1 comment

Comments

@icing
Copy link
Owner

icing commented Mar 31, 2016

With the latest additions to the nghttp2API, new frame type can be supported. The proposed ORIGIN frame should be added to inform clients about proper connection reuse, since the server will deny streams for virtual hosts with different TLS configurations. Something the client is unable to guess correctly upfront.

@icing
Copy link
Owner Author

icing commented Feb 6, 2017

With ORIGIN draft getting more attention again in the http-wg and browser showing willingness to implement, this feature needs to be considered in upcoming releases.

Current thoughts on as to how:

  • Without further configuration, send an empty ORIGIN frame at the start of the connection, making this connection viable for the SNI host only. This avoid conflicting SSL configs in different vhosts that might share a certificate.
  • Add new directive H2Origins which can take a list of authorities (hostnames+port) that only applies to SSL server configs. Can be repeatedly used, is additive.
  • Special values for H2Origins will be Never and SelfOnly, suppressing the sending of ORIGIN frames, resp. sending an empty frame.
  • Will work only with nghttp2version 1.8.0 and onwards

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant