HTTP2: Is it still experimental in v12.0.0?

Hi Jie,

11.6.0 is marked as experimental and will remain so through all 11.6.x versions. The HTTP2 profile on 11.6.0 is definitely buggy - but it is clearly labelled as experimental as you've observed.

The problems I observed in 11.6.0 were typically resolved in 12.0.0. If you want to run HTTP/2 in production, use 12.0.0 (currently at hotfix 1).

The implementation should follow the RFC. However, one would still expect to see bugs, since draft/RFC difference are still being ironed out apparently! For example: https://support.f5.com/kb/en-us/solutions/public/17000/000/sol17023

Version 12.0 supports the final HTTP2 spec. 11.6.0 suports draft 14.

Because of the intertwining of http2 with SSL, it's unfortunately not as simple as merely dropping a http2 profile on the VIP. It has to be SSL-enabled, and needs to prefer certain ciphers that the http2 spec wants so that handshakes can complete successfully.

I know that you need at least this cipher string "ECDHE+AES-GCM:DEFAULT", but I haven't spent much time to test all the configuration options needed.

Hopefully this puts you in the right direction and someone else could add on it.

I have found that v11.6.0 no longer works with the current version of Firefox (v44.0.1) which supports the final http2 spec only and not http2draft: the config network.http.spdy.enabled.http2draft no longer exists in this browser.