diff --git a/server.go b/server.go
index d90f3fcd3bf6..4f2876c2c8f1 100644
--- a/server.go
+++ b/server.go
@@ -863,6 +863,7 @@ func (s *Server) handleRawConn(lisAddr string, rawConn net.Conn) {
 	// Finish handshaking (HTTP2)
 	st := s.newHTTP2Transport(conn, authInfo)
 	if st == nil {
+		conn.Close()
 		return
 	}