Book IndexHideShow
Back to topic

Cloud Application Security



Answers to some common questions about HTTP/2 and Imperva.

What is HTTP/2?

Hypertext transport protocol (HTTP) is how browsers communicate with web servers and how pages are rendered in them since the 90s.

HTTP/2 is the latest update to HTTP. It provides multiple new features that enhanced website performance by resolving HTTP’s inherent limitations.

What Are the Benefits of HTTP/2?

Enhancing Website Performance

  • Multiple Requests Served by a Single Server Connection: When HTTP is used to surf a website, the initial request retrieves the page. Additional items attached to the page, such as JavaScript or images, must each be retrieved by a separate additional request.
  • HTTP/2 provides browser multiplexing so that multiple requests can be passed through a single server connection. This enables the server to push several resources at once, which causes the pages to load more efficiently and reduces network load.
  • Transmission in Binary Code: Older HTTP versions send data via text, which is then translated by the host through parsing. HTTP/2 transfers information in binary code, which speeds up the connections by offloading the data transformation efforts.

Increasing Security

Current browsers only support HTTP/2 through an encrypted connection, making it safer than alternative protocols.

How Does HTTP/2 Work?

Imperva acts as a reverse proxy between end-user browsers and the website origin servers.

Imperva serves HTTP/2 to browsers that support it without changing anything between the Imperva proxy and the origin server.

Imperva HTTP/2 support is not required on the customer web server. Browsers that support HTTP/2 all enforce encrypted connections and therefore SSL must be enabled.

How Can I See HTTP/2 Traffic Distribution?


To display a pie chart that shows traffic breakdown by HTTP versions:

  1. Log in to your account.
  2. On the sidebar, click Websites.
  3. Click a site name to access the site's dashboard.
  4. On the Dashboard page, click the Traffic tab and scroll down to the HTTP Versions pie chart:

To see whether a specific visitor is using HTTP/2:

On the Dashboard page, click the Real-Time tab and scroll down to the Visitors Sample chart.

Events Log

To see the protocols of a specific client:

  1. Log in to your account.
  2. On the sidebar, click Websites.
  3. Click a site name to access the site's dashboard.
  4. On the sidebar, click Events. The names of the traffic protocols are displayed.

How do I configure HTTP/2?

For details, see:

Join the Discussion