Terminating HTTP/2 over TLS on a web frontend and then HTTP/2 over plaintext to the application servers sounds like a viable model.
[1]: https://docs.aws.amazon.com/elasticloadbalancing/latest/appl...
curl -v --http2 --http2-prior-knowledge http://localhost * Connected to localhost (::1) port 80 (#0) * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x559a7c6545c0) > GET / HTTP/2 > Host: localhost > user-agent: curl/7.74.0 > accept: */* > * Connection state changed (MAX_CONCURRENT_STREAMS == 100)! < HTTP/2 301 < date: Fri, 06 Aug 2021 11:16:05 GMT *snip*
Terminating HTTP/2 over TLS on a web frontend and then HTTP/2 over plaintext to the application servers sounds like a viable model.