Lucas Pardue

HTTP/2, HTTP/3 and QUIC @Cloudflare. Co-chair of IETF QUIC WG. Thoughts are my own.

Also simmervigor on bsky and mastodon

[Lucas Pardue @SimmerVigor]

If you're still trying to get to grips with HTTP/3 and QUIC, this blog post includes a list of all of my Cloudflare TV segments with various deep dives and special guests.

[Cloudflare @Cloudflare]

A Last Call for QUIC, a giant leap for the Internet. https://t.co/KJORgGrJ1H

[Henri Helvetica 🇭🇹 👨🏾‍🚀 🚀 @HenriHelvetica]

For the 2nd time in a month, I'm welcoming an authority on protocols: Lucas Pardue, QUIC and WebTransport @quicwg co-chair will join me to chat all things HTTP3, and how it speeds up all these apps you're shipping
📆 Friday June 12th
⏰ 1pm EST, 6pm 🇬🇧
🔗 https://t.co/Nr4pFpWSvx

[Lucas Pardue @SimmerVigor]

Qmux

ルールを破るたびに、日本酒一杯おごってね

[IETF QUIC WG @quicwg]

Managing multiple paths for a QUIC connection has entered evalutation by the IESG. https://t.co/yFt1l1cBt0

[Lucas Pardue @SimmerVigor]

@ackriv How much is it?

[ゆき @flano_yuki]

『HTTPのUnencoded-Digestヘッダの提案仕様』
https://t.co/EGV9Ha5dzV
メモ的に、ブログ書いた

#asnokaze

[Lucas Pardue @SimmerVigor]

@momoka0122y Great to see you again and hang out this week. Your English is amazing.

[Lucas Pardue @SimmerVigor]

@XRP369CREATOR @Cloudflare @kkblinder

[Kari Linder 🪩🎨 @kkblinder]

We did get a Wesley Snipes gopher in there 😌

[Lucas Pardue @SimmerVigor]

HTTP/2-based DoS attacks are here to stay. Many implementations are hardened to them. Quirky behaviour can trigger defenses and cause ENHANCE_YOUR_CALM.

Read one of my latest trips down a debugging rabbit hole.

[Cloudflare @Cloudflare]

Learn how a common pattern of using Go's HTTP/2 client can lead to unintended errors and the solution to avoiding them. https://t.co/dJzcNhwkrG

[Lucas Pardue @SimmerVigor]

About 6 months ago Louis Navarre reached out to report some DoS-related vulnerabilities in quiche's ack processing. We fixed it up and saw no evidence that the vulnerabilities had been exploited. Check out the deep dive blog post: https://t.co/HnhU12MRIq

[Lucas Pardue @SimmerVigor]

@dok2001 @janwilmake Clients' congestion window? You'd have to factor in server receive window too.

Not sure on the units of tokens, packets or bytes are my lingo

[Lucas Pardue @SimmerVigor]

Enjoying the Sumo on BBC, packed out Royal Albert Hall

[Lucas Pardue @SimmerVigor]

A massive effort from many engineers across multiple teams.

Each day we've replaced planks on the fleet of Theseus composed of the ingress proxy (TLS, QUIC and more), and the brain (FL).

Our spotters in the crows nest have shouted land ahoy. The beaches are full of rustaceans.

[Cloudflare @Cloudflare]

Here's why we’ve replaced the original core system in Cloudflare with a new modular Rust-based proxy, replacing NGINX. https://t.co/FeTtWNom9M #BirthdayWeek

[Lucas Pardue @SimmerVigor]

@ackriv

[Lucas Pardue @SimmerVigor]

@huntharo @csswizardry @Cloudflare If Cloudflare is handling DNS, we support HTTPS RR by default

[Lucas Pardue @SimmerVigor]

@csswizardry @Cloudflare @SpeedCurve @ackriv DM me any time :-)

Real browsers by default support H2 and H3.

In all likelihood the H1 traffic is automated. Good bots, bad bots, etc. IIRC you can filter/view this in the dashboards.

Here's some aggregate analysis we did a couple of years ago https://t.co/RWx2i5Em0m

[Lucas Pardue @SimmerVigor]

@csswizardry @Cloudflare @SpeedCurve Give us a shout if you'd like the Layer 4 info too https://t.co/01s5cbRvGP

Cc @ackriv

[Lucas Pardue @SimmerVigor]

Super excited about this. More intel. Deeper insights. Snappier user jounrneys. Happier customers.

[Alex Krivit @ackriv]

The free tier on Cloudflare should be better than paid subscriptions elsewhere. Making sure you're getting the most out of Cloudflare starts with measurement. https://t.co/CO9RupR6bq

[Lucas Pardue @SimmerVigor]

As a MASQUE enthusiast, I approve

[Mullvad.net @mullvadnet]

We are excited to add QUIC obfuscation for WireGuard, aimed at helping users bypass firewalls and censorship. This new feature is now available on all desktop platforms.

The Android & iOS apps will include QUIC obfuscation in future releases.

Read more here: https://t.co/wIBlAec6N3

[Renan Dincer @rrnn]

We’ve deployed MoQ in production! Long time coming and first step to broader adoption