body { background: white; color: black; font-family: sans-serif; line-height: 1.4em; text-align: center; margin: 0; padding: 0; } #banner { background: black; color: #F2F2F2; line-height: 1.2em; padding: .3em 0; box-shadow: 0 5px 10px black; } #banner a { color: #00B140; } #main { text-align: left; margin: 0 auto; min-width: 32em; max-width: 64em; } #menu { float: right; width: 11em; padding: 0 .5em 1em .5em; border-left: 2px solid #DDD; } #content { margin-right: 13.5em; padding: 0 .2em 0 1.5em; } h1 { display: block; font-size: 3em; text-align: left; height: .7em; margin: 0; margin-bottom: .5em; } h1 img { width: 100%; } h2 { text-align: center; } p { text-align: justify; } table.news p { margin-top: 0; } table.news td { vertical-align: baseline; } table.news .date { text-align: right; padding-right: 0.5em; white-space: nowrap; } table.donors td { vertical-align: baseline; } table.donors li { text-align: left; } div.directive { background: #F2F2F2; line-height: 1em; margin: 1em 0 1em -1em; padding: .7em .7em .7em 1em; border-top: 2px solid #DDD; } div.directive th { padding-left: 0; padding-right: .5em; vertical-align: baseline; text-align: left; font-weight: normal; } div.directive td { vertical-align: baseline; } div.directive pre { padding: 0; margin: 0; } div.directive p { margin: .5em 0 0 .1em; font-size: .8em; } a.notrans { color: gray; text-decoration:none; } span.initial { font-size: 200%; float: left; padding-right: 10pt;} ul, ol { margin: .5em 0 1em 1em; padding: 0 .5em; } ol { list-style-position: inside; } li { text-align: justify; padding: .5em 0 0 1px; } .compact li { padding-top: 0; } dl { margin: .5em 0 1em 0; } dt { margin: .5em 0; } .compact dt { margin-bottom: .2em; } dd { margin-left: 1.5em; padding-left: 1px; text-align: justify; } td.list { background: #F2F2F2; } blockquote { margin: 1em 0 1em 1em; padding: .5em; } li blockquote, dd blockquote { margin: .7em 0; } blockquote.note { border: 1px dotted #999; line-height: 1.2em; text-align: justify; } blockquote.example { line-height: 1em; border-left: 1px solid #BBB; } blockquote.example pre { padding: 0; margin: 0; } sup { font-size: 50%; } .video { position: relative; padding-bottom: 56.25%; overflow: hidden; } .video iframe, .video object, .video embed { position: absolute; top:0; left:0; width:100%; height:100%; }
The ngx_http_v3_module
module (1.25.0) provides
experimental support for
HTTP/3.
This module is not built by default, it should be enabled with the
--with-http_v3_module
configuration parameter.
An SSL library that provides QUIC support such as BoringSSL, LibreSSL, or QuicTLS is recommended to build and run this module. Otherwise, when using the OpenSSL library, OpenSSL compatibility layer will be used that does not support early data.
The module is experimental, caveat emptor applies.
http { log_format quic '$remote_addr - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' '"$http_referer" "$http_user_agent" "$http3"'; access_log logs/access.log quic; server { # for better compatibility it's recommended # to use the same port for http/3 and https listen 8443 quic reuseport; listen 8443 ssl; ssl_certificate certs/example.com.crt; ssl_certificate_key certs/example.com.key; location / { # used to advertise the availability of HTTP/3 add_header Alt-Svc 'h3=":8443"; ma=86400'; } } }
Note that accepting HTTP/3 connections over TLS requires the TLSv1.3 protocol support, which is available since OpenSSL version 1.1.1.
http3 on
| off
;
http3 on;
http
, server
Enables HTTP/3 protocol negotiation.
http3_hq on
| off
;
http3_hq off;
http
, server
Enables HTTP/0.9 protocol negotiation used in QUIC interoperability tests.
http3_max_concurrent_streams number
;
http3_max_concurrent_streams 128;
http
, server
Sets the maximum number of concurrent HTTP/3 request streams in a connection.
http3_stream_buffer_size size
;
http3_stream_buffer_size 64k;
http
, server
Sets the size of the buffer used for reading and writing of the QUIC streams.
quic_active_connection_id_limit number
;
quic_active_connection_id_limit 2;
http
, server
Sets the
QUIC active_connection_id_limit
transport parameter value.
This is the maximum number of client connection IDs
which can be stored on the server.
quic_bpf on
| off
;
quic_bpf off;
main
Enables routing of QUIC packets using eBPF. When enabled, this allows supporting QUIC connection migration.
The directive is only supported on Linux 5.7+.
quic_gso on
| off
;
quic_gso off;
http
, server
Enables sending in optimized batch mode using segmentation offloading.
Optimized sending is supported only on Linux
featuring UDP_SEGMENT
.
quic_host_key file
;
http
, server
Sets a file
with the secret key used to encrypt
stateless reset and address validation tokens.
By default, a random key is generated on each reload.
Tokens generated with old keys are not accepted.
quic_retry on
| off
;
quic_retry off;
http
, server
Enables the
QUIC
Address Validation feature.
This includes sending a new token in a Retry
packet
or a NEW_TOKEN
frame
and
validating a token received in the Initial
packet.
The ngx_http_v3_module
module
supports the following embedded variables:
$http3
h3
” for HTTP/3 connections,
“hq
” for hq connections,
or an empty string otherwise.