traefik-http3-quic

Enable HTTP/3 (QUIC) on a Traefik ingress controller in Kubernetes.

5|Updated Feb 7, 2021

Search Tags:#kubernetes #quic #helm #cloudflare #traefik #http3 #alt-svc

Ready to run

npx skills add https://github.com/ViktorBarzin/infra --skill traefik-http3-quic

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: traefik-http3-quic
Source: https://github.com/ViktorBarzin/infra/tree/main/.claude/skills/traefik-http3-quic
Command: npx skills add https://github.com/ViktorBarzin/infra --skill traefik-http3-quic

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables HTTP/3 (QUIC) support for a Traefik ingress controller in Kubernetes, addressing misconfigured Alt-Svc headers and port exposure.

Core Features & Use Cases

Traefik Helm values: configure http3 and set advertisedPort to match the external port to ensure correct Alt-Svc.
Service ports & re-rendering: ensure the Traefik service includes a UDP port for websecure-http3 and trigger Helm template re-renders after changes.
Cloudflare integration: enable HTTP/3 in Cloudflare for proxied domains and verify end-to-end connectivity.
Verification: perform end-to-end checks from the cluster and from external clients to confirm HTTP/3 negotiation and operation.

Quick Start

Apply the Traefik HTTP/3 configuration by enabling http3 in Helm values and re-rendering the release, then verify the Alt-Svc header and UDP port exposure.

Frequently Asked Questions about traefik-http3-quic

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enable HTTP/3 on Traefik in Kubernetes?▼

Enable HTTP/3 on Traefik by configuring the http3 setting in your Traefik Helm chart values, setting the advertisedPort to match the external port, and re-rendering the Helm release templates.

Why is my Traefik HTTP/3 not working despite correct Helm values?▼

Traefik HTTP/3 fails if the Traefik service does not expose the UDP port for websecure-http3 or if the Alt-Svc header is misconfigured. Ensure the UDP port is exposed and the advertisedPort matches the external port.

Does Traefik HTTP/3 work with Cloudflare proxied domains?▼

Yes, Traefik HTTP/3 works with Cloudflare proxied domains by enabling HTTP/3 in Cloudflare settings and verifying end-to-end connectivity from both the cluster and external clients.

What is the Alt-Svc header's role in Traefik HTTP/3 configuration?▼

The Alt-Svc header advertises the availability of the QUIC protocol to clients. Setting the correct advertisedPort in Traefik Helm values ensures this header points to the proper external port.

Can I verify Traefik HTTP/3 negotiation from an external client?▼

Verify Traefik HTTP/3 negotiation by performing end-to-end checks from external clients to confirm that the QUIC protocol is operating correctly and the Alt-Svc header is properly advertised.