Forum Discussion

Pavan_Dhanushka's avatar
Pavan_Dhanushka
Icon for Altostratus rankAltostratus
Jan 12, 2021

err_http2_protocol_error

One of my client getting subjected error(err_http2_protocol_error) intermittently but When I surfed on internet and I see like this error most related chrome browser. But I couldn't find any F5 article to confirm. Can anyone help me to figure out is this related to BIGIP and Chrome issue ? Or something else I need to check this further in BIGIP side ?

 

Thanks in advance!

application delivery
ASM Advanced WAF
BIG-IP
LTM
security
  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Feb 23, 2021

    Hello Pavan,

     

    Where do you see this error in Browser console or in some BIG-IP logs?

    If in browser console, then it could be an application and not BIG-IP error.

     

    Thanks, Ivan

  • bradhanson's avatar
    bradhanson
    Icon for Altocumulus rankAltocumulus
    Apr 12, 2021

    This happens to us all the time. We have been unable to implement http2 as a result. Chrome returns message:

    The webpage at https://....... might be temporarily down or it may have moved permanently to a new web address.

    ERR_HTTP2_PROTOCOL_ERROR

     

    It is a very straightforward virtual server with HTTP2 set only on the client side.

    The console shows nothing in response. the request comes in, the error occurs.

     

    other HTTP2 sites can work from that same Chrome browser. I don't see it as a Chrome issue. Have a case open with support.

  • guly's avatar
    guly
    Icon for Nimbostratus rankNimbostratus
    May 04, 2021

    Hi. Can you share with us what was the response from F5 support about the issue? We encountered very similar issues and I'm trying to find what's the reason for ERR_HTTP2_PROTOCOL_ERROR for lots of clients. Thanks

  • bradhanson's avatar
    bradhanson
    Icon for Altocumulus rankAltocumulus
    May 04, 2021

    We are still working with it, but they found that responses were exceeding thresholds of maximum number of headers and total header table size. increasing these has helped but still tweaking. Finding RFC violations on the responses from our applications.

     

    1. extending the http profile max-header-count to 80 does not resolve the issue, then it's likely to be the http/2 profile header-table size.
    2. Leave the http profile max-header-count at 80 and increase the http/2 profile header-table-size to 6000 (or more) and test again.
  • Torti's avatar
    Torti
    Icon for Altostratus rankAltostratus
    Mar 07, 2023

    Hi,

    I run into the error now with Win11 and edg & Chrome, if an irule answer to the request. With Win10 everything is working fine.
    The irule is like this:

    HTTP::respond 403 content {
    <html>
    <head>
    <title>Request Rejected</title>
    </head>
    <body>
    <b>Hello</b><br /><br />
    Your support ID is: 666
    </body>
    </html>
    } noserver Connection Close

    return

     

    http2 is configured on client and server site. Also MRF Router is activated.

    We are running bigip 15.x

    Any idea?

    I could solve my problem.

    Its a result of a connection reset in an irule. With http2 a connection reset is displyed as error_http2_protocoll_error

    • CF-Gallia-MS-NOC's avatar
      CF-Gallia-MS-NOC
      Icon for Altostratus rankAltostratus
      Apr 13, 2023

      Hello Torti,

       

      Could you please clarify more detail regarding "Its a result of a connection reset in an irule" ?

       

      And how can you resolve the issue? Edit the irule or disable irule from VS or whatever?

       

      Thank you in advance.

       

      Regards

  • Torti's avatar
    Torti
    Icon for Altostratus rankAltostratus
    May 04, 2023

    If Im right, I changed reset actions to reject actions

    # old
switch -glob [string tolower [HTTP::path]] {
    "/path*" {
        reset
    }
}

# new
switch -glob [string tolower [HTTP::path]] {
    "/path*" {
        reject
    }
}