HTTP versions and TLS

HTTP/2 multiplexes requests on one connection and HTTP/3 runs over QUIC to avoid head-of-line blocking. TLS 1.3 needs a single round trip to set up, and terminating it at the load balancer offloads servers.

Where it shows up in real systems

  • Reverse proxy

    NGINX or HAProxy on your own machines: very cheap and flexible, but you operate it, patch it and make it redundant yourself. A single proxy is a single point of failure.

    In production: NGINX, HAProxy, Envoy, Traefik, Caddy

See it break, then fix it

Build an architecture, send it a day of traffic and outages, and learn why it holds or fails. Free to start.

Open the learning path Open the sandbox