> Can anyone point us on the right direction here? What you need is a reverse proxy in front of your Varnish instances: consider running a tool like Nginx (which has HTTP/2 support in its mainline repositories) that does all your TLS connections and proxies the request on to Varnish, to keep optimising the cache. Mattias