How to enable HTTP/2 support for Nginx?

Follow

Comments

2 comments

  • Avatar
    b_p (Edited )

    When using the "Enable HTTP/2" button of the Security Advisor, is this the same command which is executed in the background?

    Additionally, can you elaborate in more detail which configuration changes this command entails?

    From what I read:

    - change ssl_ciphers and ssl_protocols in /etc/nginx/conf.d/ssl.conf

    - for every (NGINX-enabled?) host, nginx.conf will be updated and probably the https parameter will be added to the listen directive.

    Open questions:

    - Which parameters will be updated in detail for the individual host configurations?

    - Does this affect any other configuration details (e.g., disable Proxy mode regarding Apache use etc.)?

    Fun fact: when enabling HTTP/2 via the Security Advisor, TLS1 gets enabled again (so TLS1, TLS1.1, and TLS1.2 will be active while only the last two were active before)

    0
    Comment actions Permalink
  • Avatar
    Leonid Gukhman

    @b_p

    Yes, it is the same command that is launched when enabling HTTP/2 via Security Advisor extension. TLS1 is also enabled when running the command from CLI, according to my tests (Latest Plesk Onyx 17.8).

    You are right, SSL_ciphers are added in the server-wide ssl.conf file, and http2 parameter is added to the listen directive in nginx.conf files for websites with SSL support enabled.

    No further differences are spotted in configuration files, including nginx proxy mode - its configuration remains untouched.

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request