Project

General

Profile

Actions

Optimization #4555

open

HTTP2: what to do when HTTP upgrade is requested and HTTP2 is disabled ?

Added by Philippe Antoine 2 months ago. Updated 1 day ago.

Status:
In Review
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Needs backport to 6.0

Description

Currently, Suricata expects a protocol change, but fails to recognize HTTP2 when it is disabled, leading to APPLAYER_UNEXPECTED_PROTOCOL


Related issues

Copied to Optimization #4642: HTTP2: what to do when HTTP upgrade is requested and HTTP2 is disabled ?AssignedShivani BhardwajActions
Actions #1

Updated by Jeff Lucovsky 22 days ago

  • Copied to Optimization #4642: HTTP2: what to do when HTTP upgrade is requested and HTTP2 is disabled ? added
Actions #2

Updated by Victor Julien 1 day ago

  • Assignee set to Philippe Antoine
Actions #3

Updated by Victor Julien 1 day ago

This probably needs some special case handling, but I'd say we disable app-layer but keep raw reassembly going. So rules inspecting stream content would still work.

Actions #4

Updated by Philippe Antoine 1 day ago

  • Status changed from New to In Review
Actions

Also available in: Atom PDF