upstream/opnsense-plugins
1
0
Fork 0
mirror of https://github.com/opnsense/plugins.git synced 2026-02-03 20:40:37 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

nginx: fix HTTP/3 reuseport duplicates

Browse source
This commit is contained in:
Boubik 2026-02-03 11:29:47 +01:00
parent 1278de17db
commit c63df18fcf
1 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
www/nginx/src/opnsense/service/templates/OPNsense/Nginx/http.conf
View file

@ -97,6 +97,7 @@ if cache_path.use_temp_path is defined and cache_path.use_temp_path == '1'
include opnsense_http_vhost_plugins/*.conf;
{% set listen_list = [] %}
{% set http3_reuseport_list = [] %}
{% if OPNsense.Nginx.general.enabled is defined and OPNsense.Nginx.general.enabled == '1' %}
{% for server in helpers.toList('OPNsense.Nginx.http_server') %}
{% set single_servername = server.servername.split(",")[0] %}
@ -124,8 +125,14 @@ server {
{% for listen_address in server.listen_https_address.split(',') %}
listen {{ listen_address }} ssl{% if server.proxy_protocol is defined and server.proxy_protocol == '1' %} proxy_protocol{% endif %}{% if server.default_server is defined and server.default_server == '1' %} default_server{% endif %};
{% if server.enable_http3|default("0") == "1" %}
listen {{ listen_address }} quic reuseport{% if server.default_server is defined and server.default_server == '1' %} default_server{% endif %};
{% set listen_address_clean = listen_address.replace(' ', '') %}
{% set listen_address_key = listen_address.replace(' ', '') %}
{% set http3_reuseport = false %}
{% if listen_address_key != '' and listen_address_key not in http3_reuseport_list %}
{% set http3_reuseport = true %}
{% do http3_reuseport_list.append(listen_address_key) %}
{% endif %}
listen {{ listen_address }} quic{% if http3_reuseport %} reuseport{% endif %}{% if server.default_server is defined and server.default_server == '1' %} default_server{% endif %};
{% set listen_address_clean = listen_address_key %}
{% if listen_address_clean != '' %}
{% set listen_port = listen_address_clean.split(':')[-1] %}
{% if listen_port not in http3_alt_svc_ports %}