{"id":3286,"date":"2024-02-28T12:58:29","date_gmt":"2024-02-28T10:58:29","guid":{"rendered":"https:\/\/hostkoss.com\/b\/?p=3286"},"modified":"2024-02-28T12:59:32","modified_gmt":"2024-02-28T10:59:32","slug":"http-2-nginx-ubuntu","status":"publish","type":"post","link":"https:\/\/hostkoss.com\/b\/en\/http-2-nginx-ubuntu\/","title":{"rendered":"Configuring HTTP\/2 support in Nginx on Ubuntu 18.04"},"content":{"rendered":"\n

Nginx <\/strong>is an open source web server that has won the hearts of many administrators and developers due to its efficient operation, low memory consumption and powerful support for various protocols. Today we will talk about configuring HTTP\/2 support in Nginx.<\/p>\n\n\n\n

HTTP\/2<\/strong> is an evolution of HTTP protocol that improves data transfer between server and user. It replaced HTTP 1.1, which had a limit on the number of simultaneous connections and therefore slowed down the loading of heavy pages. HTTP\/2 solves this problem by allowing concurrent data downloads and compression of HTTP headers.<\/p>\n\n\n\n

Why is switching to HTTP\/2 important? <\/h2>\n\n\n\n

Switching to HTTP\/2<\/strong> not only makes your site load faster, but also increases the security of data transfer. All modern browsers require sites to use HTTPS to support HTTP\/2, which makes data transfer between the server and visitors more secure.<\/p>\n\n\n\n

The process of migration to HTTP\/2<\/h2>\n\n\n\n

Before you start configuring HTTP\/2,<\/strong> you must have a server with Ubuntu 18.04 and Nginx installed. Also, your domain name must be pointed to the server, and you must have an SSL certificate (such as Let’s Encrypt) installed for that domain.<\/p>\n\n\n\n

1. Server setup<\/h2>\n\n\n\n

Open your domain’s configuration file:<\/p>\n\n\n\n

vim \/etc\/nginx\/sites-available\/your_domain<\/code><\/pre>\n\n\n\n
Add HTTP\/2<\/strong> support for IPv6 and IPv4 connections:<\/p>\n\n\n\n
listen [::]:443 ssl http2 ipv6only=on;\nlisten 443 ssl http2;<\/code><\/pre>\n\n\n\n
Save the<\/strong> changes and check the syntax:<\/p>\n\n\n\n
nginx -t<\/code><\/pre>\n\n\n\n
2. Improvement of security <\/h2>\n\n\n\n
To improve security, exclude insecure ciphers. In your domain configuration file, change the ssl_ciphers option:<\/p>\n\n\n\n
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;<\/code><\/pre>\n\n\n\n
Check the syntax and restart the server:<\/p>\n\n\n\n
nginx -t\nsystemctl restart nginx.service<\/code><\/pre>\n\n\n\n
3. Adding HTTP Strict Transport Security (HSTS)<\/h2>\n\n\n\n
For even more security<\/strong>, add the HTTP Strict Transport Security header to your Nginx configuration file. This header ensures that browsers will only use HTTPS connections.<\/p>\n\n\n\n
In the Nginx configuration file:<\/p>\n\n\n\n
add_header Strict-Transport-Security &amp;quot;max-age=15768000; includeSubDomains&amp;quot; always;<\/code><\/pre>\n\n\n\n
Check the syntax and restart the server.<\/p>\n\n\n\n
4. Checking correct operation of HTTP\/2<\/h2>\n\n\n\n
You can verify that HTTP\/2 is working by using the curl command:<\/p>\n\n\n\n
curl -I -L https:\/\/your_domain<\/code><\/pre>\n\n\n\n
There should <\/strong>be a mention of HTTP\/2 in the server response.<\/p>\n\n\n\n
You can also use<\/strong> Google Chrome and developer tools to check for HTTP\/2 support.<\/p>\n\n\n\n
Now your website is<\/strong> ready to work with HTTP\/2 – a faster and more secure version of the HTTP protocol! \ud83d\ude80\ud83d\udd12<\/p>\n\n\n\n
Don’t forget<\/strong> to always keep your server up to date and secure. Good luck! \ud83c\udf10<\/p>\n\n\n\n
Read also:<\/strong><\/p>\n\n\n\n