QUIC protocol configuration
Article ID: CTX584234
Updated On:
Description
QUIC protocol configuration
Instructions
- Create a HTTP profile to enable “Alt_Svc” header to advertise HTTP3 endpoint.
-----------------------------
add ns httpProfile pro ENABLED -altSvcValue "h3=\":443\"; ma=3600; persist=1"
-----------------------------
add ns httpProfile pro ENABLED -altSvcValue "h3=\":443\"; ma=3600; persist=1"
-----------------------------
- Create a SSL virtual server to handle the initial HTTPs request. The http profile is bound to generate “Alt_Svc” header.
-----------------------------
add service svc a.a.a.a SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add lb vserver 1svc SSL b.b.b.b 443 -persistenceType NONE -cltTimeout 180 -httpProfileName http_alt_svc
bind lb vserver 1svc svc
set ssl vserver 1svc -tls13 ENABLED -dtls1 DISABLED
bind ssl vserver 1svc -cipherName DEFAULT
bind ssl vserver 1svc -cipherName TLSv1.3
bind ssl vserver 1svc -certkeyName wildcard
-----------------------------
add service svc a.a.a.a SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add lb vserver 1svc SSL b.b.b.b 443 -persistenceType NONE -cltTimeout 180 -httpProfileName http_alt_svc
bind lb vserver 1svc svc
set ssl vserver 1svc -tls13 ENABLED -dtls1 DISABLED
bind ssl vserver 1svc -cipherName DEFAULT
bind ssl vserver 1svc -cipherName TLSv1.3
bind ssl vserver 1svc -certkeyName wildcard
-----------------------------
- Create a HTTP_QUIC virtual server to handle the QUIC/HTTP3 traffic.
-----------------------------
add lb vserver 2svc HTTP_QUIC b.b.b.b 443 -persistenceType NONE -cltTimeout 120
=>A HTTP profile “nshttp_default_http_quic_profile” will be created automatically and bound to it .
bind lb vserver 2svc svc
bind ssl vserver s2vc -certkeyName wildcard
=>We need to bind a certificate to HTTP_QUIC virtual server. Otherwise, the virtual server will not be UP.
add lb vserver 2svc HTTP_QUIC b.b.b.b 443 -persistenceType NONE -cltTimeout 120
=>A HTTP profile “nshttp_default_http_quic_profile” will be created automatically and bound to it .
bind lb vserver 2svc svc
bind ssl vserver s2vc -certkeyName wildcard
=>We need to bind a certificate to HTTP_QUIC virtual server. Otherwise, the virtual server will not be UP.
Was this article helpful?
Yes
No
Powered by
