Skip to content

Commit

Permalink
[Gateway] Clarify default browser QUIC behavior (#17072)
Browse files Browse the repository at this point in the history
  • Loading branch information
maxvp authored Sep 24, 2024
1 parent 05cf25d commit 84ba1e0
Showing 1 changed file with 5 additions and 14 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,9 @@ pcx_content_type: concept
title: HTTP/3
sidebar:
order: 5

---

import { Details } from "~/components"
import { Details } from "~/components";

Gateway supports inspection of HTTP/3 traffic, which uses the QUIC protocol over UDP. HTTP/3 inspection requires traffic to be proxied over UDP.

Expand All @@ -24,55 +23,47 @@ To enable HTTP/3 inspection:

Gateway can inspect HTTP/3 traffic from Microsoft Edge, as well as other HTTP applications, such as cURL.

The following browsers do not support HTTP/3 inspection:
By default, the following browsers do not support HTTP/3 inspection unless you [disable QUIC](#prevent-inspection-bypass):

* Google Chrome
* Safari
* Firefox
- Google Chrome
- Safari
- Firefox

If the [UDP proxy](#enable-http3-inspection) is enabled in Zero Trust, Gateway will force all HTTP/3 traffic in these browsers to fall back to HTTP/2, allowing you to enforce your HTTP policies. If the UDP proxy is not enabled, HTTP/3 traffic will bypass inspection.

## Prevent inspection bypass

To prevent HTTP/3 traffic from bypassing inspection, disable QUIC in your users' browsers.


<Details header="Google Chrome">

1. Go to `chrome://flags`
2. Disable **Experimental QUIC protocol**.
3. Relaunch Chrome.


</Details>


<Details header="Safari">

1. Go to **Safari** > **Settings** > **Advanced** and enable **Show Develop menu in menu bar**, then relaunch Safari.
2. Go to **Develop** > **Experimental Features** and disable **HTTP/3**.
3. Relaunch Safari.


</Details>


<Details header="Firefox">

1. Go to `about:config`.
2. If you receive a warning, select **Accept the Risk and Continue**.
3. Disable **network.http.http3.enable**.
4. Relaunch Firefox.


</Details>


<Details header="Microsoft Edge">

1. Go to `edge://flags`
2. Disable **Experimental QUIC protocol**.
3. Relaunch Edge.


</Details>

0 comments on commit 84ba1e0

Please sign in to comment.