How to enable HTTP2 for AZURE App Gateway with WAF?

McFadden, Scott (GE Aviation, US) 46 Reputation points
2020-04-19T03:00:47.983+00:00

Have some Windows Server 2019 with IIS vms running behind Azure App Gateway with WAF. Looking at the chrome network trace of the web apps running on those server, each http request is showing http 1.1.

I read here that Azure now supports HTTP2. What are the pre-requisites and steps for enabling HTTP/2 for my ASP.NET web apps running on Windows Server 2019 / IIS VMs behind Azure App Gateway with WAF?

Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,174 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Adarsh Pandey 16 Reputation points
    2021-01-21T12:26:39.077+00:00

    Is there any update on upstream grpc or http/2 communication support for WAF. It is high demand now.

    3 people found this answer helpful.
    0 comments No comments

  2. SnehaAgrawal-MSFT 19,511 Reputation points
    2020-04-20T09:37:16.63+00:00

    Thanks for asking question! Yes, you are right HTTP/2 protocol support is available to clients that connect to application gateway listeners only. The communication to back-end server pools is over HTTP/1.1 But by default, HTTP/2 support is disabled and you need to select ‘enabled’ from portal or use below PowerShell command for this.

    $gw = Get-AzApplicationGateway -Name test -ResourceGroupName hm

    $gw.EnableHttp2 = $true

    Set-AzApplicationGateway -ApplicationGateway $gw

    You may also refer to below links for more details:

    https://learn.microsoft.com/en-us/azure/application-gateway/configuration-overview#additional-protocol-support

    https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/application-gateway-web-application-firewall-portal

    1 person found this answer helpful.

  3. Oliver Dowler 1 Reputation point
    2022-01-19T08:10:31.943+00:00

    Is there any update to when HTTP2 upstream will be supported?
    Currently, it makes GRPC total incompatible unless you want to host GRPC alongside GRPC web.

    Is there a ticket we can follow related to its implementation?