#quic

Following some discussions during #IETF last week (in the hallway and on various mailing lists), the awesome #IPvFoo extension now shows in Mozilla #FireFox if connections used H1, H2, or H3, not just IPv4-vs-IPv6! This is helpful for seeing how that angle of Happy Eyeballs works. (It would work in the Chrome version as well but the interface for getting at this info is broken and always returns H1.) Note that if the connection starts with H2 but then switches to H3 for later objects on the hostname (eg, if you have an Alt-Svc record) then it will show H3 rather than H2. https://addons.mozilla.org/en-US/firefox/addon/ipvfoo/ #QUIC #HTTP2 #HTTP3 #IPv6 #HappyEyeballs

XRING bug can crash XQUIC HTTP/3 servers via QPACK 🔗 https://cybersecurefox.com/en/xquic-xring-qpack-remote-dos-vulnerability #xquic #xring #qpack #http3 #quic

We have better #security and #performance standards than most online banking sites, offering #0-RTT + #QUIC + #Post-Quantum #Cryptography. #tls #ssl #mastodon #instance

Spent way too long getting HTTP/3 working on FreeBSD with nginx, so I wrote it all up. The highlights: stock OpenSSL silently breaks QUIC at the HTTP/3 framing layer (the TLS handshake succeeds, so openssl s_client lies to you). eBPF worker routing doesn't exist on FreeBSD. And if nginx is in a jail with IPv4 NAT, a pass rule for UDP 443 is useless without a matching rdr. New post: https://blog.hofstede.it/http3-on-freebsd-getting-quic-working-with-nginx-in-a-bastille-jail/ #FreeBSD #nginx #HTTP3 #QUIC #Networking

Our Mastodon instance burningboard.net now supports HTTP/3 (QUIC). HTTP/3 replaces TCP with UDP as its transport protocol, offering lower latency and better performance, especially on lossy or low-bandwidth networks. If you encounter any unexpected issues, feel free to drop me a message 🙂 #mastodon #mastoadmin #http3 #quic