HTTP/2 SSL Offloading with Hitch and Varnish
Updated August 2026: Hitch + Varnish HTTP/2 offloading is still a solid pattern. On current Debian/Ubuntu, prefer current Hitch/Varnish packages, keep TLS 1.2+ only, and re-check varnishd CLI flags — some older examples used options...