HTTP 1.0 Block

Why are there switches for http 2 and 3 in the dashboard but not for 1 or 1.1?

1 Like

You can block requests by HTTP version in the WAF.

3 Likes

Wasn’t my question but thanks.

Then what was the question?

Can’t explain it any clearer.

Any clearer than having added a screenshot to explain it? No probably not. HTTP 1 or 1.1 aren’t there because of hey aren’t something that can be optimized.

2 Likes

Your title was “HTTP 1.0 Block”. Those toggles you mentioned don’t “block” HTTP/2 and HTTP/3 traffic as your title seems to suggest: they completely disable/enable the protocols. There is a big difference between the two.

So, given your title, I’ll argue @sjr provided the best overall answer to the spirit or essence of your question.

But to answer your specific question, HTTP/2 and HTTP/3 are new-ish protocols that aren’t universally supported by all webservers and browsers, especially older ones. That’s why these toggles are provided to enable/disable them as needed.

HTTP 1.0 and 1.1, on the other hand, are THE traditional HTTP protocol supported by all webservers and browsers, and can’t be turned off (if you want to serve HTTP traffic at all). That’s why there are no toggles to enable/disable them.

As @sjr, mentioned, while you can’t completely disable HTTP 1.0 and 1.0 protocols, you can block requests coming from any of the HTTP protocols in your WAF.

Good luck!

5 Likes

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.