openwrt
[WIP] Support nginx with QUIC
Signed-off-by: Martin Schneider [email protected]
Maintainer: me Compile tested: Netgear R7800, Netgear R8000 (both OpenWrt 19.07 and 21.02). Run tested: See the set-up described in this PR.
This uses the nginx-quic branch and boringssl instead of OpenSSL.
The nginx team is working on merging their experimental branch back into the nginx mainline branch. The roadmap is described here.
It's better to wait for an official nginx stable release with QUIC support as it is experimental and that's not what package repository users expect.
It's better to wait for an official nginx stable release with QUIC support as it is experimental and that's not what package repository users expect.
I tend to agree. Now, there is also a roadmap for this: https://www.nginx.com/blog/our-roadmap-quic-http-3-support-nginx. However, this will still depend on BoringSSL or https://github.com/quictls/openssl so we could probably prepare for it by driving https://github.com/openwrt/packages/pull/15822.
It's better to wait for an official nginx stable release with QUIC support as it is experimental and that's not what package repository users expect.
I tend to agree. Now, there is also a roadmap for this: https://www.nginx.com/blog/our-roadmap-quic-http-3-support-nginx. However, this will still depend on BoringSSL or https://github.com/quictls/openssl so we could probably prepare for it by driving #15822.
Since it got merged in nginx 1.25.0 it would be possible to build nginx with boringssl on stable packages now. I think this change would be very desirable because OpenSSLs roadmaps says it will take them still years until they fully support http/3.
@CodeFetch What do you think? I could spend some time to try with 1.25.0 and update the PR.
not sure if @CodeFetch is still active, so tagging @Ansuel because is one of the nginx maintainers so i guess can give advise here how to proceed
Can you link patch needed for boringssl support?
I would create a variant for it instead of replacing openssl. (I assume dynamic module should work with both variant?)
@martinschneider what is the state of this? afaik nginx now have support for httpv3
I'm not currently using this setup. I will look into it with the latest version of nginx when I find some time.