The Facts about LiteSpeed Web Server's HTTP/2 Support https://www.litespeedtech.com/images/logos/litespeed/litespeed-logo.png 2020-02-03 19:19:53 Everything you need to know about HTTP2: What is it? Why should you use it? And why is LiteSpeed the natural choice?

Everything You Need To Know About HTTP/2

What it is, why you should use it, and why LiteSpeed is the natural choice

accelerate internet
[

Accelerate Your Internet Now!

]

HTTP/2 is…

The Second Major Revision of the HTTP Network Protocol
Created by The Working Group and based on Google’s SPDY network protocol, HTTP/2 is the first major improvement to the HTTP standard in almost 20 years. As of May 2015, HTTP/2 has been published as RFC 7540.
Replacement for Google’s SPDY
Given that many of the key features of HTTP/2 are improvements on their existing (non-standard) SPDY network protocol, Google has decided to remove support for SPDY in early 2016 in favor of the HTTP/2 standard.
A Binary Protocol
This is a switch from HTTP/1.1 which was a text protocol. By changing to binary the ease of use provided by a plain text representation is lost, but what you get is a more efficient, more compact, and less error-prone protocol.
MultiPlexed
HTTP/1.1 had a Head-of-line blocking problem where, even with the use of pipelining, a slow or large response message could block others behind it. HTTP/2 attempts to fix this by using multiplexing: the combining of separate request and response messages into a single message to later be broken down into their individual parts at the receiving end using the message header. This allows the client to make parallel requests over a single TCP connection per origin when loading a page. This is beneficial as it stops browsers from using as many of the client’s network resources as well as reducing congestion server side which in turn reduce the chances of a buffer overflow/retransmit.
Compatible with HTTP/1.1
One of the primary goals when creating HTTP/2 was to maintain high compatibility with HTTP/1.1. As such the HTTP semantics have not been changed ensuring backwards-compatibility. Browsers will also automatically switch from HTTP/1.1 to HTTP/2 if both they and the server support it. This switch is both instant and invisible to the user.
Beneficial to the End User
HTTP/2 is proven to have faster page load speeds, especially for encrypted HTTPS sites. Encryption is stronger with required support for Perfect Forward Secrecy for a more private, more secure browsing experience.
Beneficial to Hosting Service Providers
Whether you provide hosting to big companies trying to increase conversion rates or small blogs looking to improve their audience retention, there is no better way to accomplish these things than by providing a smoother, faster browsing experience. HTTP/2 gets content to consumer devices more quickly, efficiently, and securely than other existing network protocols. Thus by combining the improvements brought by HTTP/2 with the speed and efficiency of LiteSpeed Web Server, you become a much more attractive hosting option.
Available Now
If you happen to be using the latest versions of popular web browsers such as Google Chrome or Mozilla Firefox, you are already set up to take advantage of all the benefits of HTTP/2 enabled web pages. Examples of these include web sites powered by Google and all current editions of LiteSpeed Web Server.

HTTP/2 uses…

HPACK Header Compression
Because of TCP’s Slow Start mechanism, it is beneficial to send out as few packets as possible to reduce the total number of round trips required when loading a page. By compressing the involved message headers, what would normally take several round trips can now be done in one. This type of compression was used by default in SPDY using GZIP and optionally in HTTPS . Since then a security exploit known as CRIME has made GZIP and this type of compression unsecure. In response to this HTTP/2 uses HPACK: a new, header-specific compression scheme created by The Working Group that possesses reasonable compression efficiency while still being secure.
Optional Encryption
HTTP/2 uses TLS for encryption but, like HTTP/1.1, does not require it. Despite this, both Mozilla Firefox and Google Chrome have stated that they will only allow HTTP/2 over an encrypted connection. These decisions in effect make encryption mandatory, facilitating more secure communication on the Web.
Server Push
Server Push is a method of information delivery where a server pushes a resource directly to the client without first receiving a request to do so. By doing this the server can attempt to anticipate client requests and pre-push them into the client’s cache in an effort to avoid the usual request-response round trip delay.

HTTP/2 Server Support

If you would like to check a web server/site for HTTP/2 support, you can do so with the following browser extensions/add-ons:

For detailed information on how to use these tools to check for HTTP/2 support, try our How to check a Website For HTTP/2 Support page.


Configuring Your Site To Use HTTP/2

In order to use HTTP/2 on your site, you must first modify your site to use HTTPS.

For current LiteSpeed users with an HTTPS enabled site
If you are using LiteSpeed Web Server and already have HTTPS configured, you only need to upgrade to LiteSpeed Enterprise 5.0+ to begin using the HTTP/2 network protocol.
HTTPS Not Yet Enabled
If your site is not currently configured to use HTTPS, have a look at our short guide for Enabling HTTPS On Your Site.
For those who would rather not convert to LiteSpeed
If you do not want to convert your current web server to LiteSpeed but would still like to use HTTP/2 on your site, you can instead do this for free by setting up OpenLiteSpeed as a front-end proxy for your existing web server.

Web Servers Supporting HTTP/2

Here is a short list of notable web servers currently known to support http/2

  • OpenLiteSpeed 1.3.x and 1.4.x
  • LiteSpeed Enterprise 5.0+
  • H2O (A new event drive webserver, not much use in production environments)
  • nghttp2 (An HTTP/2 C library, the server is more like an example on how to use the lib)
  • Jetty (Java Servlet engine)
  • http2 (Go)
  • node-http2 (NodeJS)

http/2 implementation
[

HTTP/2 Implementations

While it does support HTTP/2, Apache's mod_http2 is currently in an experimental stage.

]

Privacy Policy

Privacy Policy

LiteSpeed Technologies, Inc. (aka “LiteSpeed”) is committed to protecting your privacy. This policy ("Privacy Policy" or "Policy") explains our practices for our site, www.litespeedtech.com ("Site"). You can visit most pages of the Site without giving us any information about yourself, but sometimes we do need information to provide services that you request. By using this Site or any products or services provided through the Site, you expressly consent to the use and disclosure of information as described in this Privacy Policy.

LiteSpeed reserves the right to revise, modify, add, or remove provisions to this Privacy Policy at any time. If we make changes to this Privacy Policy, we will update the Effective Date to note the date of such changes. LiteSpeed encourages you to review this Privacy Policy periodically for any changes. IF YOU DO NOT AGREE WITH ANY OF THE TERMS BELOW, YOU SHOULD NOT USE THIS SITE OR THE PRODUCTS OR SERVICES OFFERED BY LITESPEED TECHNOLOGIES AT THIS SITE.

Collection of Information

Personal Information.

LiteSpeed will ask you for certain “Personal Information” when you complete registration or product information request forms on the Site, including but not limited to your name, address, telephone number, email address, and credit card information. You can always choose not to provide us with the requested information, however, you may not be able to complete the transaction or use our products or services if you do not provide the information requested.

Non-Personal Information.

LiteSpeed may collect non-personally identifiable information from you such as the type of browser you use, your operating system, the screen resolution of your browser, your ISP, your IP address, which pages you view on the Site and the time and duration of your visits to the Site (collectively, “Non-Personal Information”). LiteSpeed may associate Non-Personal Information with Personal Information if you register with the Site.

User Communications.

If you communicate with us, we may collect information relating to that communication whether it takes the form of email, fax, letter, forum posting, blog comments, testimonials or any other form of communication between you and LiteSpeed or Submitted by you to the Site (collectively, “User Communications”).

Server Information.

If you use one of our software products such as LiteSpeed Web Server or LiteSpeed Web ADC, we may collect certain information concerning such software and concerning the server upon which the software operates. This information includes: (a) the licensed or unlicensed status of the software; (b) the source from which the license for the software was obtained (i.e., LiteSpeed or a LiteSpeed affiliate); or (c) information about the server upon which the software is installed including (i) the public IP address, (ii) the operating system and (iii) the use of any virtualization technologies on such server ((a) through (c) collectively, “Server Information”). Additionally, “Server Information” may also include information collected from you by LiteSpeed in the event that you request technical support services including without limitation, IP addresses, usernames, and passwords necessary to login to SSH, the root directory of the server upon which you installed the LiteSpeed software and any affected accounts including email accounts, control panel accounts, MySQL accounts, CMS accounts and other accounts.

Use and Storage of Collected Information

LiteSpeed may use Personal Information to create and authenticate your account, to respond to your requests, to provide you with customer and technical support, or to provide you with information regarding our products, services, partners, and company. You may update your Personal Information with us at any time, but we may maintain records of any Personal Information you disclose to us indefinitely, unless otherwise requested as outlined below.

We may use User Communications in the same ways we use Personal Information. If you communicate with us for a particular purpose, we may use your User Communications for that purpose. For example, if you contact us for technical support, we may use your communications to provide technical support to you. We may maintain records of User Communications you transmit to us indefinitely, unless otherwise requested as outlined below.

LiteSpeed may use Non-Personal Information to maintain, evaluate, improve and provide our Site, the Services and any other LiteSpeed products and services. We may retain Non-Personal Information indefinitely.

We may use Server Information to provide you with technical support services and to maintain, evaluate, improve and provide LiteSpeed products and services. We may also use such information to investigate unlicensed (and therefore unauthorized) uses of our software. LiteSpeed may maintain Server Information indefinitely, with the exception of usernames, passwords, and other login information given in connection with support service requests. Such login information will be purged when the ticket is closed.

Disclosure of Collected Information

LiteSpeed will only disclose Personal Information to third parties if acting under a good faith belief that such action is necessary, including but not limited to: (a) to resolve disputes, investigate problems, or comply with laws or regulations; (b) to enforce our Terms of Service; (c) to protect and defend the rights, property, or safety of our company or our users; or (d) in the event of a merger, acquisition or sale of all or substantially all LiteSpeed assets. Other than this limited activity, we do not share, sell, or rent any personal information to third parties.

You will receive notice in the form of modifications to this Policy when information about you might go to third parties other than as described in this Policy, and you always have the opportunity to contact us as set forth below if you do not wish your information to go to third parties.

LiteSpeed cannot be responsible for protecting your information if you share such information in publicly available sections of the Site such as the user forums, blog comments, or testimonials section. You should use your own judgment in disclosing this information on the Site.

Use of Cookies

“Cookies” are small pieces of information that your browser stores on your computer on behalf of a website that you have visited. Cookies may be used in order to complete transactions on our site. You can always choose not to accept cookies with the settings of your web browser, however, you may not be able to complete these transactions if you do not accept cookies.

Security of Personal Information

We use reasonable security methods to protect your personal information from unauthorized access, use or disclosure. No data transmission over the Internet or any wireless network can be guaranteed to be perfectly secure. While we try to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.

LiteSpeed uses industry-standard SSL-encryption to protect sensitive data.

In the event that LiteSpeed becomes aware of a security breach, unauthorized disclosure or inadvertent disclosure concerning your information, you agree that LiteSpeed may notify you of such an event using the Personal Information previously provided.

You are responsible for maintaining your account’s security.

GDPR Statement

LiteSpeed Technologies values your users’ privacy. Although our software does not directly collect any personally identifiable information from visitors to your site, LiteSpeed may still be considered a data processor, as user information may be temporarily cached and/or logged, as outlined in this document.

Servers

LiteSpeed Web Server, OpenLiteSpeed, LiteSpeed Web ADC, and related software may record IP addresses as a part of normal logging. An access log and an error log may record visitor IP addresses and URL visited. The logs are stored locally on the system where LiteSpeed server software is installed and are not transferred to or accessed by LiteSpeed employees in any way, except as necessary in providing routine technical support if you request it. This logging may be turned off through configuration. It is up to individual server administrators to come up with their own schedule for removing such logs from the file system.

Cache Solutions

Our cache plugins potentially store a duplicate copy of every web page on display on your site. The pages are stored locally on the system where LiteSpeed server software is installed and are not transferred to or accessed by LiteSpeed employees in any way, except as necessary in providing routine technical support if you request it. All cache files are temporary, and may easily be purged before their natural expiration, if necessary, via a Purge All command. It is up to individual site administrators to come up with their own cache expiration rules.

LSCache for WordPress

In addition to caching, our WordPress plugin has an Image Optimization feature. When optimization is requested, images are transmitted to a remote LiteSpeed server, processed, and then transmitted back for use on your site. LiteSpeed keeps copies of optimized images for 7 days (in case of network stability issues) and then permanently deletes them.

Similarly, the WordPress plugin has a Reporting feature whereby a site owner can transmit an environment report to our server so that we may better provide technical support.

Neither of these features collects any visitor data. Only server and site data is involved.

Support Services

Sometimes, when you request technical support, LiteSpeed may ask for login credentials to various areas of your site. You may refuse to share such credentials, however refusal may impact LiteSpeed’s ability to provide the requested support services.

Upon completion of a support ticket, LiteSpeed immediately deletes all login credentials you may have shared.

Any user data encountered by LiteSpeed is kept strictly confidential. We never provide your support ticket information to any third party without your explicit consent.

Contact Us

If you would like to update information that you have voluntarily provided to us, stop receiving information from us, or exercise any of the rights granted to you under Privacy Laws, including the EU’s General Data Protection Regulation, please e-mail info@litespeedtech.com.