]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: proxy/server: reject TCP ALPN h3 without experimental
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Tue, 19 May 2026 14:30:40 +0000 (16:30 +0200)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Tue, 19 May 2026 16:40:50 +0000 (18:40 +0200)
commite30bcfe6cda364620451062a606eaa6636f1a3f6
tree643e72b795f1c7b0a2408f2b23a6aa4878a80a8e
parent879c78c9094886c73301a8847995e9ef48d560e8
MINOR: proxy/server: reject TCP ALPN h3 without experimental

Add a postparsing check on TCP ALPN bind and server setting. An error is
reported if the token "h3" is present and expose-experimental-directives
is not globally activated. This ensures that QMux protocol won't be
selected if experimental features are not explicitely requested.

The check is not performed though if "proto qmux" is explicitely
defined, as this setting already checks for experimental support.

Currently, it's not possible to activate QMux without any explicit
"proto qmux" config. However, this will be implemented in a next patch,
so this check will become necessary.
src/proxy.c
src/server.c