Project

General

Profile

Actions

Optimization #4555

closed

HTTP2: what to do when HTTP upgrade is requested and HTTP2 is disabled ?

Added by Philippe Antoine 4 months ago. Updated 21 days ago.

Status:
Closed
Priority:
Normal
Target version:
Effort:
Difficulty:
Label:
Needs backport to 6.0

Description

Currently, Suricata expects a protocol change, but fails to recognize HTTP2 when it is disabled, leading to APPLAYER_UNEXPECTED_PROTOCOL


Related issues

Copied to Optimization #4642: HTTP2: what to do when HTTP upgrade is requested and HTTP2 is disabled ?ClosedShivani BhardwajActions
Actions #1

Updated by Jeff Lucovsky about 2 months ago

  • Copied to Optimization #4642: HTTP2: what to do when HTTP upgrade is requested and HTTP2 is disabled ? added
Actions #2

Updated by Victor Julien about 1 month ago

  • Assignee set to Philippe Antoine
Actions #3

Updated by Victor Julien about 1 month ago

This probably needs some special case handling, but I'd say we disable app-layer but keep raw reassembly going. So rules inspecting stream content would still work.

Actions #4

Updated by Philippe Antoine about 1 month ago

  • Status changed from New to In Review
Actions #5

Updated by Philippe Antoine 21 days ago

  • Status changed from In Review to Closed
Actions

Also available in: Atom PDF