Anyone working on HTTP/2 in apache2 charm?

[Robie Basak]

Hi Mark,

On Tue, May 10, 2016 at 07:59:02AM -0700, Mark Shuttleworth wrote:
> Oh, I would think we definitely want to enable http2 in Xenial by
> default! Jay can you take care of that?

HTTP/2 support in Apache is still considered experimental by
upstream[1], so we didn't enable it in the LTS under security team
guidance[2]. Support is available in nginx though, as that went stable
in time.

We intend to enable HTTP/2 support for Apache in an SRU as soon as
upstream consider it stable and no longer experimental.

The concern is that both implementation and configuration directives may
change, and we can't realistically follow this in the LTS timeframe
without breaking production users. This in turn would compromise
security since upstream security patches will no longer apply and be
tough to backport.

A weighing up of regression risk to users will need to influence any
future SRU decision to enable support, of course.

Robie

[1] https://httpd.apache.org/docs/2.4/mod/mod_http2.html
[2] https://wiki.ubuntu.com/XenialXerus/ReleaseNotes#HTTP.2F2_support_in_Apache_httpd
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/juju/attachments/20160513/17aa8f39/attachment.pgp>