Skip to main content
NicholeKaligian
NicholeKaligian
New Member
November 10, 2022
Question

HTTP/2 support on a proxy

  • November 10, 2022
  • 1 reply
  • 4046 views

Hi,

 

I'm using a Fortigate device to configure a proxy in our network that will be used to test our software. This particular proxy needs to support HTTP/2 traffic. Its role is only to be a proxy for this traffic, no security policies or firewalling needs to be done on this traffic. 

 

Looking at the Fortigate documentation, I find some info on what Fortigate can do with this traffic, when using a reversed or 'true transparent' proxy. 

  • From what I understand, a transparent proxy requires the device to be the default gateway? This device is just sitting in the test lab, it currently isn't setup as a gateway (or anything else). 
  • This suggests that the explicit web proxy can't handle HTTP/2 traffic?

1 reply

Sheikh
Staff
Sheikh
Staff
November 10, 2022

Hi NicholeKaligian,

 

I was checking internally and found that as per Admin guide, HTTP/2 in FortiOS Proxy mode is supported. I found some articles and that might help you.

 

https://docs.fortinet.com/document/fortiweb/7.0.1/administration-guide/36824/http-2-support

 

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/710924/http-2-support-in-proxy-mode-ssl-inspection

 

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiOS-unencrypted-encrypted-HTTP-2-support-in/ta-p/198196

 

regards,

 

Sheikh

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.
NicholeKaligian
NicholeKaligianAuthor
New Member
November 10, 2022

Hi Sheikh,

 

Thank you for your reply.

 

Those are indeed the articles that I had found so far, but that doesn't provide any information on the explicit web proxy specifically. The documentation only mentions reverser proxy and transparent proxy. 

Sheikh
Staff
Sheikh
Staff
November 10, 2022

Hi NicholeKaligian,

 

I further checked internally and found these documents of "Supported RFCs"

 

FortiOS 7.0

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/3ccd389a-e341-11eb-97f7-00505692583a/FortiOS-7.0-Supported_RFCs.pdf

 

Added RFC 1928 to Other protocols on page 15.
Supported when explicit proxy is implemented.


https://www.rfc-editor.org/rfc/rfc7540

 

FortiOS 6.2

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/22795caa-468c-11e9-94bf-00505692583a/FortiOS-6.2-Supported_RFCs.pdf

RFC 7540: Hypertext Transfer Protocol Version 2 (HTTP/2) added.
Only flow mode is supported; proxy mode is not yet supported.

 

regards,

 

Sheikh

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.
Terms & ConditionsAccessibility statement