unbound DoH behind nginx

[Emre Eryilmaz]

>The problem might be that the nginx proxy talks HTTP 1.1 to unbound
>while unbound expects encrypted HTTPS 2. Nginx doesn't support HTTP 2 on
>the downstream connection.

Thanks Hauke. You gave me the clue :)

Yes, nginx proxy module doesn't support http/2. I use nginx grpc_proxy
with unbound "http-notls-downstream: yes" option. 

Solved.


-- 
Emre Eryilmaz
emre.eryilmaz at piesso.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20211214/519d644b/attachment-0001.bin>