THERE ISN'T MUCH POINT TO HTTP/2 PAST THE LOAD BALANCER

Summary from the TLDR newsletter

Handling HTTP/2 is better left to the infrastructure entry point, typically the load balancer or reverse proxy, as they have to decrypt and decompress the request to know what to do with it, so there is no need to re-encrypt and re-compress it to forward to the app server.