nginx版本1.25.4 并且成功启用http3,速度确实提升不少
宝塔网站配置- server
- {
- listen 443 ssl;
- listen [::]:443 ssl;
- listen 443 quic reuseport;
- listen [::]:443 quic reuseport;
-
- ssl_early_data on;
- add_header Alt-Svc 'h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=:443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"';
-
- server_name www.xxxx.cn;
- index index.php index.html index.htm default.php default.htm default.html;
- root /www/wwwroot/xxxx.cn;
- #SSL-START SSL相关配置,请勿删除或修改下一行带注释的404规则
- #error_page 404/404.html;
- #HTTP_TO_HTTPS_START
- if ($server_port !~ 443){
- rewrite ^(/.*)$ https://$host$1 permanent;
- }
- #HTTP_TO_HTTPS_END
- ssl_certificate /www/server/panel/vhost/cert/xxxx.cn/fullchain.pem;
- ssl_certificate_key /www/server/panel/vhost/cert/xxxx.cn/privkey.pem;
- ssl_protocols TLSv1.3;
- # ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
- ssl_prefer_server_ciphers on;
复制代码 但是发现网站日志有大量http1.1请求,通过第三方测试也是http1.1
怎么禁用http1.1或者http1.1转向http3,如果http3不可用则转向http2协议
|
|