HAProxy http2 on pfSense 2.3.4

[lorelore75]

hi there,
I've 2.3.4-RELEASE-p1, with HaProxy 1.7.4, with https offloading and nginx like backend tha t listen on http.
I remember that this release cannot support http2 cause of openssl version, but I cannot find the link that speak about it.
Could you please confirm that to use http2 on pfSense as a frontend, I need to upgrade to latest version?

thanks a lot

kind regards

[stephenw10]

HTTP2 frontend support was added in HAProxy 1.8 so you will need at least a package that is built on that.
The HAProxy-dev package in 2.4.4 uses 1.8.14.

I have never used that feature myself though.

Steve

[lorelore75]

@stephenw10
Hi Steve,
thanks a lot for your reply.
haproxy-dev means not stable, isn't it?
Have you got any information about availability of a stable version?

Lore

[PiBa]

@lorelore75
Haproxy-devel pfSense package does get updated a bit more often, it also gets fixed sooner if i break something.. But the main haproxy 1.8 binary version is considered as stable / released upstream. the 1.9dev would be its development version.

[lorelore75]

This post is deleted!

[lorelore75]

thanks afor your help.
I've updated to 2.4.4 but there is 1.7.11 haproxy.
Now the question is: Can I install also haproxy-devel while running haproxy?
If yes, what happend? does it replace existing haproxy (using current config) or install another instance that I should configure from scratch?

thanks a lot

[PiBa]

@lorelore75
You can install it while running, though it might cause a interruption regarding the handling of requests, and do check the new version is running after installing. Haproxy-devel replaces haproxy, and uses the same configuration settings so 'upgrade' should be pretty much seamless. Going back to 'haproxy' package should also be possible but sometimes 'upgraded' settings don't take effect in the older version.. So careful a quick comparison of the expected haproxy.cfg is wise to do :), but i guess thats also true when performing upgrades :)