Change https://go.dev/cl/573995 mentions this issue: net/http: log error when HTTPS server receives HTTP request

cc @neild

Hi @seankhliao could you share your thoughts on this proposal?

I know you're not obligated to explain downvotes but other people would also benefit from you sharing your perspectives on this matter.

If the problem is that my proposal doesn't contain enough information then I'd be happy to add more information.

Previous related #56028

I think this is a duplicate of #49310 for which a draft CL already exists.

I think this is a duplicate of #49310 for which a draft CL already exists.

No, that proposal is about modifying the HTTP(S?) response to the client, whereas this proposal is about printing something to server's console via stdout/stderr.

That proposal is of having a hook when this happens. You can also log in that hook, or not. You yourself wrote:

no logging and there is no ability for me to add any logging to it at all.

#49310 gives you that ability, or if current proposal in that issue is lacking/preventing you from using it to do logging, make a comment there.

That proposal is of having a hook when this happens. You can also log in that hook, or not. You yourself wrote:

no logging and there is no ability for me to add any logging to it at all.

#49310 gives you that ability, or if current proposal in that issue is lacking/preventing you from using it to do logging, make a comment there.

Okay, I see so the idea is to allow users to write their own HttpOnHttpsPortErrorHandler func(conn net.Conn, requestBytes []byte) function that would have access to the net.Conn which would have the RemoteAddr.

Yes you're right that would allow me to achieve what I want here and it would be a more flexible solution compared to what I want to do.

We have an existing log line for TLS handshake errors, we just suppress it for requests that look like HTTP:

if re, ok := err.(tls.RecordHeaderError); ok && re.Conn != nil && tlsRecordHeaderLooksLikeHTTP(re.RecordHeader) {
  io.WriteString(re.Conn, "HTTP/1.0 400 Bad Request\r\n\r\nClient sent an HTTP request to an HTTPS server.\n")
  re.Conn.Close()
  return
}
c.server.logf("http: TLS handshake error from %s: %v", c.rwc.RemoteAddr(), err)

https://go.googlesource.com/go/+/refs/tags/go1.22.1/src/net/http/server.go#1930

If we're going to log some TLS handshake errors, I don't see any reason we shouldn't be logging all of them.

Unmarked as proposal, since I don't think this requires going through the proposal process. It's not an API change, and the behavioral change isn't particularly significant.

Change https://go.dev/cl/573979 mentions this issue: net/http: also log TLS errors which look like HTTP sent to an HTTPS port