Skip to content

Remove option to disable http2 for metrics server#143

Merged
phillebaba merged 1 commit intonetbirdio:mainfrom
phillebaba:enable-http2
Mar 18, 2026
Merged

Remove option to disable http2 for metrics server#143
phillebaba merged 1 commit intonetbirdio:mainfrom
phillebaba:enable-http2

Conversation

@phillebaba
Copy link
Collaborator

HTTP2 was disabled to mitigate security risks from CVE-2023-44487 and CVE-2023-39325 which have long since been fixed in Go. Removing the option that was false by default enables http2 and also reduces some confusion about why it is an option in the first place.

Signed-off-by: Philip Laine <philip.laine@gmail.com>
@phillebaba phillebaba merged commit 8267cc4 into netbirdio:main Mar 18, 2026
5 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants