QUIC do not work

[Émerson Felinto]

I have read and followed all the instructions on this page but QUIC is not working:
https://www.litespeedtech.com/support/wiki/doku.php/litespeed_wiki:config:enable_quic
Something that I noticed and that I really doubt about it is that one of the "Requirements" is "a trusted certificate" and not self-signed. I do not know what that means exactly, but I'm using Let's encrypt, does it have a problem?

Here's the site I'm trying to make QUIC work:

https://xxx.com.br/

Unfortunately so far without success. I have already seen the header and the QUIC information appears there ... however the site is loaded using HTTP / 2.

Any idea what can be happening?

 

[NiteWave]

just now I checked. it's running apache, and http / 2.

 

[Émerson Felinto]

At the time I created this post was with litespeed enabled.
I switched to Apache because I am still learning to configure Litespeed and I do not want any errors to influence the performance of my sites. I'll switch to Litespeed now so you can debug.

Any idea what's going on?

 

[Émerson Felinto]

(Update)
The site xxx.com.br is not yet working QUIC, but another site that is in my infrastructure is working perfectly:

xxx.com.br

The difference between one and another is that only the second website mentioned here ... is using a dedicated IP. But he is also using Let's Encrypt, which removes the possibility of being a problem with the certificate.

 

[NiteWave]

please check the lsws version / build on the 2 servers.
lsws 5.2.3 build 7 is latest.

 

[Émerson Felinto]

They are not two servers.
Both are on the same cPanel server, however the difference is that the site "xxx.com" is using a dedicated IP. I do not understand how this can influence or what are the next steps for me to do debug.

 

[NiteWave]

please confirm the lsws version
if it's latest version, looks like a bug and we need fix it.

 

[Émerson Felinto]

Is attached.

 

[NiteWave]

yes. it's latest 5.2.3 build 7.
another possibility is firewall settings.
please check if UDP 443 port in/out is accepted for all IPs

 

[Émerson Felinto]

These are the settings I put in the CSF.
See "UDP_IN" and "UDP_OUT". Is the configuration correct?
Even if I'm wrong, I see no point in the fact that QUIC works on one domain and on the other does not ...

 

[mistwang]

please check netstat, see if the IP for

https://classificadospatrocinio.com.br/

has been listened on for UDP.
make sure the site is not going through another frontend proxy.

 

[Émerson Felinto]

Sorry, I do not understand. Could you review this information in a simpler way with the commands that should be executed?

 

[mistwang]

netstat -anup | grep 443

make sure 177.11.48.56 is there.

 

[Émerson Felinto]

Check attached image.

 

[Tishu]

I just check

https://classificadospatrocinio.com.br/

and QUIC is working. Did you change something?

 

[Émerson Felinto]

Hello, how did you come to that conclusion?

 

[Émerson Felinto]

QUIC has been temporarily disabled before someone comes in this post and says that QUIC has not been activated ...
I'm feeling a lack of community support, I'm using a TRIAL license from litespeed and I need everything to work perfectly so that I can then purchase the license for the product. Could any ADMIN help me?
I'm not seeing any mention of error logs ... or any tip that might help me.

 

[Jon K]

Can you re-enable QUIC to see if it is still working like Tishu said?

If you have a browser opened with H2 currently being used then it will continue being used until you open a new browser session as the connection is cached.

 

[Émerson Felinto]

All tests were done using the anonymous chrome navigation tab. I'll be testing again and updating this post.

 

[mistwang]

I think there is a UDP connectivity issue, can you use tcpdump on the server side to check if UDP packet can go through reach 177.11.48.56.