Description

Fixes #6403

Breaking Change:

• If enable_http2 is set for any entry under apisix.ssl.listen or apisix.ssl.node_listen , all entries will enable http2. Becuase nginx-1.25.3 change the configuration of http2

from

server {
       listen 443 ssl http2;
}

to

server {
       http2 on;
       listen 443 ssl;
}

From user perspective, if I have following configuration, the port 9443 and 9444 will both support http2. The enable_http2: false takes no effect for port 9444

apisix:
  ssl:
    listen:
      - port: 9443
        enable_http2: true # enable http2
      - port: 9444
        enable_http2: false # disable http2.

• ngx.req.read_body need HTTP/2 or HTTP/3 request must has a content-length header which is introduced in https://github.com/openresty/lua-nginx-module/tree/v0.10.26. Even for GET request, we still need sent the header content-length: 0 whether we call ngx.req.read_body directly or indrectly. such as https://github.com/apache/apisix/pull/10887/files#diff-d099a6d3ec103fc01c1d4354f7e3659002bd53c8bb5013b26d7ec0b88910074fR192-R193

doc for ngx.req.read_body from lua-nginx-module-0.10.26

Due to the stream processing feature of HTTP/2 or HTTP/3, this api could potentially block the entire request. Therefore, this api is effective only when HTTP/2 or HTTP/3 requests send content-length header. For requests with versions lower than HTTP/2, this api can still be used without any problems.

• apisix will no longer support tongsuo. because QUIC of nginx needs QUIC TLS which tongsuo does not support currently.

related PRs:

• chore: upgrade nginx to 1.25.3 api7/ngx_multi_upstream_module#12
• feat: sync from upstream to support openresty-1.25.3 api7/ngx_multi_upstream_module#13
• feat: change the order of header files to support openresty-1.23.5.1 api7/grpc-client-nginx-module#73
• feat: update header files to support openresty-1.23.5.1 api7/wasm-nginx-module#162
• feat: upgrade to openresty-1.25.3.1 api7/apisix-nginx-module#83
• feat: upgrade to openresty-1.25.3.1 api7/apisix-build-tools#367

Checklist

• I have explained the need for this PR and the problem it solves
• I have explained the changes or the new features added to this PR
• I have added tests corresponding to this change
• I have updated the documentation to reflect this change
• I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)