CurvePreferences: crypto.TLSCurveIDs(),
		EnableHTTP2:      false,
	}.NewHTTPTransportWithTimeout(timeout)
}

// NewRemoteTargetHTTPTransport returns a new http configuration
// used while communicating with the remote replication targets.
func NewRemoteTargetHTTPTransport(insecure bool) func() *http.Transport {
	return xhttp.ConnSettings{
		LookupHost:       globalDNSCache.LookupHost,

		IdleTimeout: ctxt.IdleTimeout,
	}

	// allow transport to be HTTP/1.1 for proxying.
	globalInternodeTransport = NewInternodeHTTPTransport(ctxt.MaxIdleConnsPerHost)()
	globalRemoteTargetTransport = NewRemoteTargetHTTPTransport(false)()
	globalProxyEndpoints = GetProxyEndpoints(globalEndpoints, globalRemoteTargetTransport)

	globalForwarder = handlers.NewForwarder(&handlers.Forwarder{
		PassHost:     true,