Skip to content

Commit

Permalink
fixup! Add quic-secret-period flag
Browse files Browse the repository at this point in the history
  • Loading branch information
tatsuhiro-t committed Feb 6, 2024
1 parent f94ae87 commit bc1b7d9
Showing 1 changed file with 12 additions and 11 deletions.
23 changes: 12 additions & 11 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -201,17 +201,18 @@ and new key is generated in the interval specified by
`--quic-secret-period` flag. nghttpx listens on UDP port specified by
`--nghttpx-https-port` flag.

> [!WARNING] As of v0.66.0, Secret is integrated to the one specified
> by `--nghttpx-secret` flag, and `--quic-keying-materials-secret`
> flag has been removed. The default value is also changed.
> Previously, it is `nghttpx-quic-km` but now `nghttpx-km`. To
> migrate from the previous release, before upgrading
> nghttpx-ingress-controller to v0.66.0, copy Secret `nghttpx-quic-km`
> to `nghttpx-km`, and upgrade nghttpx-ingress-controller. The keying
> materials are now rotated and new key is generated in every 4 hours
> by default. The new key is first placed at the end of the list. In
> the next rotation, it is moved to the first, and is used for
> encryption.
> [!WARNING]
>
> As of v0.66.0, Secret is integrated to the one specified by
> `--nghttpx-secret` flag, and `--quic-keying-materials-secret` flag
> has been removed. The default value is also changed. Previously,
> it is `nghttpx-quic-km` but now `nghttpx-km`. To migrate from the
> previous release, before upgrading nghttpx-ingress-controller to
> v0.66.0, copy Secret `nghttpx-quic-km` to `nghttpx-km`, and upgrade
> nghttpx-ingress-controller. The keying materials are now rotated
> and new key is generated in every 4 hours by default. The new key
> is first placed at the end of the list. In the next rotation, it is
> moved to the first, and is used for encryption.

HTTP/3 requires the extra capabilities to load eBPF program. Add the
following capabilities to the nghttpx-ingress-controller container:
Expand Down

0 comments on commit bc1b7d9

Please sign in to comment.