Enabling HTTP/3 support on Windows Server 2022

I have enabled HTTP3/QUIC on a number of Windows Server 2022 web servers, below are my notes from OneNote on how to enable it.

Please note though that I have seen non-pooled memory leaks caused by the QUIC driver, which uses up all available memory and requires a server reboot to free up memory resources. The busier the web server the more often it occurs.

1. Create the following registry entries;

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server]

"DisabledByDefault"=dword:00000000

"Enabled"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters]

"EnableHttp3"=dword:00000001

"EnableAltSvc"=dword:00000001

 2. Run the following in PowerShell to enable TLS_CHACHA20_POLY1305_SHA256

Enable-TlsCipherSuite -Name TLS_CHACHA20_POLY1305_SHA256 -Position 0

3. Reboot
 

4. Enable the following cypher suites

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

TLS_CHACHA20_POLY1305_SHA256

5. Add Response header in IIS, http3

alt-svc    h3=":443"
 

6. Reboot