HTTP/3 hosting: Ntsuas QUIC thiab fallback HTTP/2

HTTP/3 hosting yog yog uas muab lub vev xaib tso rau saum HTTP/3 kev cai, siv QUIC hloov TCP. Kev teeb tsa kom raug tsis yog txhais tias yuav tsum kaw HTTP/2, tiam sis yog qhib HTTP/3 hla UDP 443, khaws HTTPS saum TCP 443 thiab tshaj tawm qhov kev pabcuam los ntawm Alt-Svc. Thaum siv tsis tau QUIC vim yog firewall, tuam txhab network lossis cuab yeej qub, browser tseem tuaj yeem nkag tau siv HTTP/2.

Hauv zaj no, kuv yuav piav txog txoj kev nkag siab QUIC, teeb tsa HTTP/3 nrog Nginx, tsim fallback kom nyab xeeb thiab txheej txheem ntsuas kev ua tau zoo uas rov ua tau.

QUIC yog dab tsi thiab HTTP/3 txawv ntawm HTTP/2 li cas?

QUIC yog dab tsi? Nws yog ib qho kev cai xa ntaub ntawv uas khiav saum UDP, txuas nrog TLS 1.3 thiab txheej txheem ntau stream. HTTP/3 muab lub ntsiab lus ntawm HTTP txuas rau QUIC, hloov chaw khiav saum TCP ib yam li HTTP/1.1 thiab HTTP/2 (raws li ietf.org).

Yam ntsuas	HTTP/2	HTTP/3
Kev cai xa ntaub ntawv	TCP	QUIC saum UDP
Kev mã hóa	Feem ntau siv TLS nrog HTTPS	TLS 1.3 yog ib feem uas QUIC yuav tsum muaj
Head-of-line blocking	Tej zaum yuav tshwm sim ntawm txheej TCP	Txo qhov cuam tshuam ntawm cov stream
Kev txav connection	Muaj kev txwv thaum hloov network	QUIC txhawb connection migration
Port uas nquag siv	TCP 443	UDP 443
Fallback	Feem ntau cov browser niaj hnub tsis tas yuav fallback nqis mus rau HTTP/1.1	Fallback rov mus rau HTTP/2 hla TCP thaum UDP ua tsis tiav

HTTP/3 feem ntau muaj txiaj ntsig dua thaum tus neeg siv hloov network, siv mobile network lossis ntsib latency thiab packet poob. Txawm li cas los xij, tsis txhob xav tias txhua lub vev xaib yuav nrawm dua pom tseeb. Yog tias server twb muaj TTFB qis, muaj resource tsawg thiab cov neeg siv feem ntau nyob hauv network ruaj khov, qhov sib txawv yuav me. Ntsuas siv tib qhov chaw network, tib version ntawm cov ntsiab lus thiab tib lub cache xwm txheej.

HTTP/3 kuj yuav tsum qhib UDP. Yog li ntawd, firewall, load balancer, CDN lossis tus muab hosting yuav tsum xa UDP 443 mus ntxiv; qhib TCP 443 xwb tseem tsis txaus.

Teeb tsa HTTP/3 nrog Nginx thiab fallback HTTP/2

Nginx txhawb HTTP/3 module txij mainline ceg 1.25.0 mus ntxiv, tiam sis module ngx_http_v3_module yuav tsum muab compile lossis siv lub server package uas twb muaj module haum (raws li nginx.org). Ua ntej hloov configuration, xyuas:

Nginx puas muaj HTTP/3 module: nginx -V 2>&1 | grep http_v3.
Muaj TLS certificate siv tau thiab domain taw rau lub server raug.
TCP 443 thiab UDP 443 puav leej raug tso cai hauv firewall.
CDN lossis reverse proxy nyob rau pem hauv ntej puas txhawb HTTP/3 thiab xa cov protocol mus raug.

Yog koj tab tom npaj Ubuntu server, kuj tuaj yeem saib ntxiv phau ntawv qhia teeb tsa Ubuntu Server thaum pib kom rov xyuas firewall, SSH thiab cov kev teeb tsa hauv paus.

Qauv Nginx configuration yooj yim

server {
    listen 443 ssl;
    listen 443 quic reuseport;

    server_name example.com www.example.com;

    ssl_certificate     /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
    ssl_protocols       TLSv1.3;

    add_header Alt-Svc 'h3=":443"; ma=86400' always;

    location / {
        root /var/www/example;
        index index.html index.php;
    }
}

Kab listen 443 ssl khaws HTTPS saum TCP thiab tso cai rau HTTP/2 ua haujlwm. Kab listen 443 quic reuseport qhib QUIC saum UDP ntawm tib tus lej port. Nginx pom zoo siv tib port rau HTTP/3 thiab HTTPS kom sib raug zoo dua (raws li nginx.org).

Yog xav qhib HTTP/2 kom meej rau Nginx version uas haum, siv tau:

listen 443 ssl http2;

Hauv Nginx version tshiab, txoj kev tshaj tawm HTTP/2 yuav hloov raws version thiab cov lus ceeb toom ntawm configuration. Khiav nginx -t ua ntej reload. Tsis txhob rho TCP listener tawm tsuas yog vim HTTP/3 twb ua haujlwm lawm: qhov ntawd yuav ua rau cov neeg siv hauv network uas thaiv UDP nkag tsis tau.

Alt-Svc tsis yog kev redirect

Alt-Svc yog ib qho lus qhia tias tib resource ntawd tuaj yeem nkag tau los ntawm HTTP/3. Feem ntau browser yuav txuas HTTPS hla TCP ua ntej, nyeem cov lus qhia ntawd thiab mam sim QUIC thaum cov kev thauj khoom tom qab. Yog li ntawd, thawj qhov response tsis tas yuav siv HTTP/3. Teem always yuav pab kom header tshwm hauv qee qhov error response thiab, tiam sis koj tseem yuav tsum xav txog cache policy thiab proxy.

Ntsuas QUIC qhov kev ua tau zoo es tsis yog saib Lighthouse qhab nia xwb

Yog xav ntsuas HTTP/3 hosting, muab HTTP/2 thiab HTTP/3 sib piv hauv tib qho xwm txheej. Yam tsawg kawg yuav tsum sau tseg lub sijhawm txuas, TTFB, lub sijhawm thauj cov peev txheej tseem ceeb, feem pua yuam kev thiab kev rov ua haujlwm thaum hloov network.

Kuaj tus qauv kev sib txuas lus nrog curl

# Chỉ thử HTTP/3, thất bại nếu QUIC không kết nối được
curl --http3-only -I https://example.com/

# Thử HTTP/3 và cho phép fallback về HTTP/2 hoặc HTTP/1.1
curl --http3 -I https://example.com/

# Ép HTTP/2 để tạo đường cơ sở
curl --http2 -I https://example.com/

--http3-only pab lees paub tias QUIC yeej ua haujlwm tiag tiag; --http3 tso cai rau fallback mechanism zoo ib yam li HTTPS eyeballing (raws li curl.se). Nco ntsoov tias curl yuav tsum tau compile nrog kev txhawb HTTP/3.

Yog xav ntsuas ntau zaus, siv qhov kev xaiv teev sijhawm:

curl --http3-only -sS -o /dev/null 
  -w 'HTTP=%{http_version} DNS=%{time_namelookup} connect=%{time_connect} start=%{time_starttransfer} total=%{time_total}n' 
  https://example.com/

Khiav li 10–20 zaug rau ib tus qauv kev sib txuas lus, hla cov zaug uas yuam kev thiab sau tseg lub sijhawm, qhov chaw, IPv4/IPv6, thiab CDN cache xwm txheej. Tsis txhob muab ib zaug HTTP/3 uas cache txias piv nrog ib zaug HTTP/2 uas twb tau cache lawm.

Nyeem Nginx log kom lees paub QUIC

log_format protocols '$remote_addr $request $status http=$server_protocol h3=$http3 quic=$quic';
access_log /var/log/nginx/protocols.log protocols;

Cov biến uas cuam tshuam HTTP/3 yuav pab cais tau request uas siv QUIC ntawm request uas hla TCP. Yog log tsis sau tseg request HTTP/3 txawm tias curl --http3-only ua tiav, xyuas hom format ntawm log thiab txheej txheem reload.

Thaum kuaj hauv browser, qhib DevTools, mus rau Network, qhib kem Protocol ces reload nplooj ntawv. Tus nqi feem ntau yuav qhia h3 lossis h2. Nov yog txoj kev siv tau los kuaj HTTP/3 website, tabsis yuav tsum siv curl thiab server log ua ke vim browser muaj Alt-Svc cache.

Fallback HTTP/2 kom raug: kev kuaj, teeb meem nquag thiab kev txiav txim siab siv

Fallback zoo yuav tsum tshwm sim ib txwm ntawm theem kev txuas, tsis tas yuav siv JavaScript lossis redirect. Txheej txheem yuav tsum yog: browser sim HTTP/3 hla UDP 443; yog tsis tau txais lus teb tsim nyog, nws siv HTTPS hla TCP 443 thiab sib tham HTTP/2 hla ALPN. Tus tswj hwm yuav tsum xyuas kom ob txoj kev siv tib daim ntawv pov thawj, hostname, cov ntsiab lus thiab txoj cai kev ruaj ntseg.

Daim ntawv txheeb xyuas ua ntej qhib production

Kuaj kom daim ntawv pov thawj npog txhua hostname uas siv.
Qhib TCP 443 thiab UDP 443 ntawm server, cloud firewall thiab security group.
Lees paub tias Nginx yeej muaj HTTP/3 module nrog nginx -V.
Khiav nginx -t && systemctl reload nginx.
Siv curl --http3-only los ntawm tsawg kawg ob lub network sib txawv.
Siv curl --http2 kom lees paub tias TCP txoj kev tseem ua haujlwm.
Kuaj DevTools thiab log kom muab tus qauv kev sib txuas lus sib piv.
Taug qab feem pua yuam kev 4xx, 5xx, UDP timeout thiab cov lus teb los ntawm cov neeg siv mobile.

Cov teeb meem nquag

Qhib tsuas yog TCP 443: HTTP/2 khiav tau tabsis HTTP/3 ib txwm ua tsis tiav. Txoj kev kho yog qhib UDP 443 ntawm txhua txheej network.
Kaw TCP listener: cov neeg siv tom qab corporate network lossis firewall nruj yuav plam fallback. Cia HTTPS TCP nyob twj ywm.
Alt-Svc muaj port lossis hostname tsis raug: browser sim QUIC ntawm qhov chaw uas tsis muaj. Siv h3=":443" yog HTTP/3 siv tib port.
Daim ntawv pov thawj tsis raug: QUIC xav tau TLS 1.3 thiab txheeb xyuas daim ntawv pov thawj ib yam li HTTPS ib txwm. Rov txuas hnub nyoog daim ntawv pov thawj ua ntej sim.
CDN tsis txhawb HTTP/3 mus rau origin: cov neeg siv yuav pom h3 ntawm CDN tabsis qhov txuas CDN–origin tseem yog HTTP/2 lossis HTTP/1.1. Qhov no tsis yog yuam kev, tabsis yuav tsum nkag siab kom raug txog thaj tsam ntawm qhov ntsuas.
Ntsuas raws li ib zaug thauj: qhov tshwm sim raug cuam tshuam los ntawm cache, DNS thiab network route. Siv ntau tus qauv thiab tshaj tawm tus nqi nruab nrab lossis p95.

Yog website muaj neeg siv coob lossis vam khom CDN, kuaj IPv6 ntxiv thiab vim kev xaiv network route yuav hloov qhov txiaj ntsig ntawm HTTP/3 qhov ntsuas. Kab lus kuaj IPv6 hosting tiag tiag tuaj yeem siv ua daim ntawv txheeb xyuas ntxiv.

Xaus: yuav tsum qhib HTTP/3 thaum tus neeg muab kev pab txhawb UDP ruaj khov, koj tswj tau firewall/CDN thiab muaj txheej txheem ntsuas. Qhov kev teeb tsa nyab xeeb tshaj yog khiav HTTP/3 tib lub sijhawm ntawm UDP 443 thiab HTTP/2 ntawm TCP 443. Tsis txhob siv lo lus tshaj tawm “HTTP/3 ib txwm ceev dua” ua lub hauv paus txiav txim; txiav txim raws li TTFB, lub sijhawm thauj, feem pua yuam kev thiab kev paub siv hauv ntau lub network tiag tiag.