Pega web application uses http/1.1 protocol. Our security team requires our application to use http/2. Is there a way to change it?

General
1

Pega web application uses http/1.1 protocol. Our security team requires our application to use http/2. Is there a way to change it?

image
image1603×402 28.4 KB

2

I think to configure the protocol in server.xml on the server side. HTTP/2 instead of HTTPS

3

Hi @SathishkumarJ17617111 : Few recommendations.

Using HTTP 1.1 is not a security issue by itself if the traffic is encrypted with TLS.

Regarding the change to HTTP 2, this is not just in the Pega. You also need to implement it in the other layers like your reverse proxy or load balancers.

I would suggest to create a support ticket with Pega to know if the images from Pega can be updated to make use of HTTP 2. At the same time, check with the infra team if the same can be implemented in the reverse proxy or Load balancer level.

Thanks.

4

Thanks Arul and Ramesh, I got a confirmation from Pega that Pega currently does not support HTTP/2 for the Pega Platform, which applies to both on-premise and cloud deployments.