If you're still trying to get to grips with HTTP/3 and QUIC, this blog post includes a list of all of my Cloudflare TV segments with various deep dives and special guests.
For the 2nd time in a month, I'm welcoming an authority on protocols: Lucas Pardue, QUIC and WebTransport @quicwg co-chair will join me to chat all things HTTP3, and how it speeds up all these apps you're shipping
📆 Friday June 12th
⏰ 1pm EST, 6pm 🇬🇧
🔗 https://t.co/Nr4pFpWSvx
HTTP/2-based DoS attacks are here to stay. Many implementations are hardened to them. Quirky behaviour can trigger defenses and cause ENHANCE_YOUR_CALM.
Read one of my latest trips down a debugging rabbit hole.
About 6 months ago Louis Navarre reached out to report some DoS-related vulnerabilities in quiche's ack processing. We fixed it up and saw no evidence that the vulnerabilities had been exploited. Check out the deep dive blog post: https://t.co/HnhU12MRIq
@dok2001@janwilmake Clients' congestion window? You'd have to factor in server receive window too.
Not sure on the units of tokens, packets or bytes are my lingo
A massive effort from many engineers across multiple teams.
Each day we've replaced planks on the fleet of Theseus composed of the ingress proxy (TLS, QUIC and more), and the brain (FL).
Our spotters in the crows nest have shouted land ahoy. The beaches are full of rustaceans.
Here's why we’ve replaced the original core system in Cloudflare with a new modular Rust-based proxy, replacing NGINX. https://t.co/FeTtWNom9M #BirthdayWeek
@csswizardry@Cloudflare@SpeedCurve@ackriv DM me any time :-)
Real browsers by default support H2 and H3.
In all likelihood the H1 traffic is automated. Good bots, bad bots, etc. IIRC you can filter/view this in the dashboards.
Here's some aggregate analysis we did a couple of years ago https://t.co/RWx2i5Em0m
The free tier on Cloudflare should be better than paid subscriptions elsewhere. Making sure you're getting the most out of Cloudflare starts with measurement. https://t.co/CO9RupR6bq
We are excited to add QUIC obfuscation for WireGuard, aimed at helping users bypass firewalls and censorship. This new feature is now available on all desktop platforms.
The Android & iOS apps will include QUIC obfuscation in future releases.
Read more here: https://t.co/wIBlAec6N3