INTEGRITY Cloudflare Docs

Troubleshoot protocol issues

This guide covers common HTTP/2 and HTTP/3 issues, including origin incompatibility, multiplexing errors, and browser errors, with steps to diagnose and resolve them.

H2 to Origin - Origin incompatibility

H2 Multiplexing - Origin incompatibility/issues

Generic browser errors

Common browser errors include:

These errors do not necessarily indicate a protocol-level issue. Follow these steps:

  1. Attempt reproduction using HTTP/1.1.
  2. If the issue persists in HTTP/1.1, address the underlying error before testing HTTP/2 or HTTP/3.
  3. If the issue does not persist, analyze netlogs for HTTP/2 or HTTP/3-specific issues.

For more information, refer to Chromium URL Request Header.

Chrome stalls or fails only on HTTP/3

If the issue reproduces only in Chrome over HTTP/3 and disappears when HTTP/3 is disabled, the problem may be related to a browser-side QUIC handling issue rather than your origin server. This is a known Chrome issue (crbug.com/41161335) — Cloudflare's QUIC implementation is not the cause.

Symptoms can include:

How to isolate the issue

  1. Temporarily disable HTTP/3 for the zone.
  2. Test the same request again over HTTP/2.
  3. If the issue disappears over HTTP/2, capture a NetLog for Chrome and compare the behavior.

Test immediately: In Chrome, go to chrome://flags, search for "QUIC", set it to Disabled, then relaunch Chrome.

Resolution

If the issue is limited to specific hostnames, you can apply a more targeted workaround: create a Response Header Modification Transform Rule to remove the Alt-Svc header for the affected hostname.

  1. In the Cloudflare dashboard, go to the Rules Overview page.
  2. Select Create rule > Response Header Transform Rule.
  3. Set the matching expression to your hostname: (http.host eq "example.com").
  4. Under Modify response header, select Remove and enter Alt-Svc as the header name.

This forces Chrome to use HTTP/2 for that hostname without disabling HTTP/3 globally. However, proxied hostnames can also advertise HTTP/3 through generated HTTPS records, so disabling HTTP/3 for the zone is the most reliable way to force HTTP/2 while you troubleshoot.

After changing Alt-Svc, remember that browsers may cache the advertised alternative service for up to 24 hours.