Quic on ubuntu precompiled

General Discussion
, ,
1

After getting my configuration in Http3 with stream proxies? fixed I tested whether browsers actually use http3, and figured out, they don´t.

Looking for the reason I suspect the version I am using - nginx 1.29.8 - doesn´t yet support quic.

nginx -V reports:

nginx version: nginx/1.29.8
built by gcc 13.3.0 (Ubuntu 13.3.0-6ubuntu2~24.04.1)
built with OpenSSL 3.0.13 30 Jan 2024
TLS SNI support enabled
…

whereas the openssl documentation indicates, quic server is supported with 3.5+ only.

I am wondering why nginx doesn´t warn about configuration is OK but doesn´t work somewhere.

With ubuntu 26.04 available within the next weeksand expected to use openssl 3.5+ (3.5 is included in 25.10) - is nginx planning to support Ubuntu 26.04 soon after availability?

2

From the docs

The ngx_http_v3_module module (1.25.0) provides experimental support for HTTP/3.

This module is not built by default, it should be enabled with the --with-http_v3_module configuration parameter.

This module requires the OpenSSL library version 1.1.1 or higher.

So if nginx -V shows --with-http_v3_module you should have basic QUIC support.

OpenSSL 3.5.1+ is required for 0-RTT support.

3

it does show --with-http_v3_module. I am using nginx from nginx repo.

I don´t care whether it has basic QUIC support. It doesn´t work with any browser I tried.

This module requires the OpenSSL library version 1.1.1 or higher.

This is not consistent with the information by OpenSSL:

OpenSSL 3.2 and later features support for the QUIC transport protocol. Currently, only client connectivity is supported (https://docs.openssl.org/3.4/man7/openssl-quic/)

OpenSSL 3.2 and later features support for the QUIC transport protocol. You can use OpenSSL’s QUIC capabilities for both client and server applications. (openssl-quic - OpenSSL Documentation)

I don´t have any reason not to trust OpenSSL, do you?