QUIC protocol configuration

book

Article ID: CTX584234

calendar_today

Updated On:

Description

QUIC protocol configuration

Instructions

  1. Create a HTTP profile to enable “Alt_Svc” header to advertise HTTP3 endpoint.
-----------------------------
add ns httpProfile pro ENABLED -altSvcValue "h3=\":443\"; ma=3600; persist=1"
-----------------------------
 
  1. Create a SSL virtual server to handle the initial HTTPs request.  The http profile is bound to generate “Alt_Svc” header.
-----------------------------
add service svc a.a.a.a SSL 443 -gslb NONE -maxClient 0 -maxReq 0 -cip DISABLED -usip NO -useproxyport YES -sp OFF -cltTimeout 180 -svrTimeout 360 -CKA NO -TCPB NO -CMP NO
add lb vserver 1svc SSL b.b.b.b 443 -persistenceType NONE -cltTimeout 180 -httpProfileName http_alt_svc
bind lb vserver 1svc svc
set ssl vserver 1svc -tls13 ENABLED -dtls1 DISABLED
bind ssl vserver 1svc -cipherName DEFAULT
bind ssl vserver 1svc -cipherName TLSv1.3
bind ssl vserver 1svc -certkeyName wildcard
-----------------------------
 
 
  1. Create a HTTP_QUIC virtual server to handle the QUIC/HTTP3 traffic.
-----------------------------
add lb vserver 2svc HTTP_QUIC b.b.b.b 443 -persistenceType NONE -cltTimeout 120
=>A HTTP profile  “nshttp_default_http_quic_profile” will be created automatically and bound to it .
bind lb vserver 2svc svc
bind ssl vserver s2vc -certkeyName wildcard 
=>We need to bind a certificate to HTTP_QUIC virtual server. Otherwise, the virtual server will not be UP.

Powered by Wolken Software