Skip to main content

HTTP Protocols

(MI.ProtocolACL)

Overview​

This feature can be configured at the site and host levels. It cannot be configured at the path level.

Use this feature to customize which HTTP protocols are available to the client.

If the MI.ProtocolACL object is not present in the site configuration (i.e. if the HTTP protocols are not explicitly specified):

  • HTTP/1.1 is enabled by default.

  • If an SSL certificate is associated with the site, HTTPS/1.1 and http/2 are automatically enabled.

Example​

In this example, three protocols are enabled:

{
  "generic-metadata-type": "MI.ProtocolACL",
  "generic-metadata-value": {
    "protocol-acl": [
      {
        "action": "allow",
        "protocols": [
          "http/1.1",
          "https/1.1",
          "http/2"
        ]
      }
    ]
  }
}


Supported Properties​

FieldValid Values
actionallow, deny
protocolshttp/1.1, https/1.1, http/2
info

Do not enable https/1.1 or http/2 unless an SSL certificate is associated with your site.