Page 1 of 1

vestacp nginx openssl http2

Posted: Mon Feb 22, 2016 7:40 am
by mephivio
Hi all,

i make a test this sunday updating NGINX to the last release (http2 support incluing) + openssl 1.02 on a Debian Jessie platform using VestaCP last release
it works great.

Before doing that on my production platform, i'd like to know if officialy i will working with your next release or i have to wait a few weeks before you publish it.

Performances under http2 are very interesting

Thanks for your feedback
Jerome

Re: vestacp nginx openssl http2

Posted: Tue Feb 23, 2016 10:59 am
by newtron
mephivio wrote: Performances under http2 are very interesting
Only interesting on HTTPS.... And LetsEncrypt isn't compatible with older browsers :(.

Re: vestacp nginx openssl http2

Posted: Thu Apr 14, 2016 11:53 am
by skurudo
mephivio wrote: Before doing that on my production platform, i'd like to know if officialy i will working with your next release or i have to wait a few weeks before you publish it.
May - it's much possible, I think.
mephivio wrote:Performances under http2 are very interesting
How so, Jerome? Much faster than SPDY?

Re: vestacp nginx openssl http2

Posted: Thu Apr 14, 2016 11:55 am
by skurudo
newtron wrote:Only interesting on HTTPS.... And LetsEncrypt isn't compatible with older browsers :(.
Yep, in plans - https://bugs.vestacp.com/issues/104

LetsEncrypt isn't compatible, not SNI by nginx? You sure?

Re: vestacp nginx openssl http2

Posted: Thu Apr 14, 2016 7:30 pm
by metro2030
mephivio wrote:Hi all,

i make a test this sunday updating NGINX to the last release (http2 support incluing) + openssl 1.02 on a Debian Jessie platform using VestaCP last release
it works great.

Before doing that on my production platform, i'd like to know if officialy i will working with your next release or i have to wait a few weeks before you publish it.

Performances under http2 are very interesting

Thanks for your feedback
Jerome
I have already done this:
1) you have to edit nginx repo (/etc/yum.repos.d/nginx.repo for CentOS and RHEL) by replacing 'baseurl' with this

Code: Select all

baseurl=http://nginx.org/packages/mainline/OS/OSRELEASE/$basearch/
Where OS is 'centos' or 'rhel' and OSRELEASE is '5', '6' or '7'
2) yum update
3) enter /home/(vesta_user)/conf/web/snginx.conf and add 'http2'

Code: Select all

server {
    listen	xx.xx.xx.xx:443 http2;
...
}
4) nginx -s reload

P.S.: If you use Debian-like, please refer to nginx official site.

One minus. This enables http2 for every domain=(
I am really not a programmer and can't propose any fix.
I will leave this to skurudo =)

Re: vestacp nginx openssl http2

Posted: Thu Apr 14, 2016 8:36 pm
by mephivio
yep
http2 seems to be really faster
page display is also more fluid
Have a test, you will not regret it

ps: tested with Joomla, Wordpress, Prestashop
Conf : PHP 7.0 + NGINX 1.9.x

Re: vestacp nginx openssl http2

Posted: Fri Apr 22, 2016 1:39 pm
by skurudo
metro2030 wrote: One minus. This enables http2 for every domain=(
I am really not a programmer and can't propose any fix.
I will leave this to skurudo =)
you can edit *.stpl files and add http/2 support, then you can rebuild web for users:
/usr/local/vesta/data/templates/web/nginx/

Re: vestacp nginx openssl http2

Posted: Wed Jul 20, 2016 8:17 am
by skurudo
LetsEncrypt support added.
CLI commands for now, GUI will be later.

Code: Select all

v-add-letsencrypt-domain USER DOMAIN [ALIASES] [RESTART]
v-add-letsencrypt-user USER [EMAIL]
v-check-letsencrypt-domain USER DOMAIN
v-list-letsencrypt-user USER [FORMAT]
v-sign-letsencrypt-csr USER DOMAIN CSR_DIR [FORMAT]
v-update-letsencrypt-ssl
ENG: viewtopic.php?t=11927
RUS: viewtopic.php?t=11905