Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(patch): add tls.disable_http2_alpn() function needed patch for disabling HTTP/2 ALPN when tls handshake. #13709

Merged
merged 7 commits into from
Oct 21, 2024

Conversation

oowl
Copy link
Member

@oowl oowl commented Sep 25, 2024

Summary

Added tls.disable_http2_alpn() function needed patch for disabling HTTP/2 ALPN when tls handshake.
Sister PR Kong/lua-kong-nginx-module#93

Checklist

  • The Pull Request has tests
  • A changelog file has been created under changelog/unreleased/kong or skip-changelog label added on PR if changelog is unnecessary. README.md
  • There is a user-facing docs PR against https://github.com/Kong/docs.konghq.com - PUT DOCS PR HERE

Issue reference

AG-119

@github-actions github-actions bot added build/bazel cherry-pick kong-ee schedule this PR for cherry-picking to kong/kong-ee labels Sep 25, 2024
@fffonion
Copy link
Contributor

need a changelog

@oowl
Copy link
Member Author

oowl commented Sep 26, 2024

Let's wait to merge Kong/lua-kong-nginx-module#93 first.

@oowl oowl changed the title feat(patch): support dynamic disable http2 alpn in ssl client hello p… feat(patch): add tls.disable_http2_alpn() function needed patch for disabling HTTP/2 ALPN when tls handshake. Sep 26, 2024
@oowl oowl force-pushed the disable-h2-alpn-re branch 3 times, most recently from 3ae4ce9 to 4e0e15f Compare September 29, 2024 15:32
Copy link
Contributor

@fffonion fffonion left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@fffonion fffonion merged commit 6d7bf68 into master Oct 21, 2024
27 checks passed
@fffonion fffonion deleted the disable-h2-alpn-re branch October 21, 2024 08:14
@team-gateway-bot
Copy link
Collaborator

Successfully created cherry-pick PR for master:

windmgc pushed a commit that referenced this pull request Nov 4, 2024
…es configured with AI-proxy. (#13735)

This change will disable HTTP/2 ALPN handshake for connections on routes configured with AI-proxy.

The following are the specific changes

- move tls related function kong/tls/plugins/certificate.lua and kong/tls/plugins/sni_filter.lua from ee to ce repo
- Based on feat(patch): add tls.disable_http2_alpn() function needed patch for disabling HTTP/2 ALPN when tls handshake. #13709 and feat: introduce tls.disable_http2_alpn() function lua-kong-nginx-module#93, we introduce the disable_http2_alpn action in the ai-proxy plugin to solve the ai-proxy plugin did not work in HTTP2 case. After the current PR is merged, HTTP/2 ALPN handshakes will be disabled for requests on routes configured with AI-proxy, and all these connections will fall back to the http1.1 protocol.

AG-119
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
build/bazel cherry-pick kong-ee schedule this PR for cherry-picking to kong/kong-ee size/M
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants