HAProxy 1.8.30 and http2

[cybis]

Hi,

I'm currently running pfsense CE 2.5.2 and the HAProxy package 0.61_3, i.e. HAProxy 1.8.30, and I have couple questions regarding the HTTP/2 configuration.

I've enabled HTTP/2 on my frontend via the advanced SSL certificate specific option:

But the auto-generated configuration does not show that option:

I would have expected the alpn h2,http/1.1 option at the end of the frontend bind directive However, I do see HTTP/2 traffic between the client and the proxy, so the option is definitely working.

The latest HAProxy (2.4) documentation explicitly mentiones HTTP/2 in the backend. However, providing the HTTP/2 option in the pass-through section in the backend (advanced) config does not work and the 1.8 documenation only mentiones HTTP/2 for a frontend config. Is my understanding correct that the 1.8 version simply does not support HTTP/2 between the proxy and a backend server?

My last question is rather a general one: if one configures 30 seconds timeout for a frontend and 60 seconds for a backend, for example, then one would still get a timeout if the backend server does not respond within 30 seconds, right? If so, what's the purpose/use case of having two timeout parameters?

BR