QUIC

Last year we made every Cloudflare server a Media over QUIC (MoQ) relay. Now the new provisioning API lets you create your own isolated relay and control who can publish and who can only watch.

Jacob Curtis, Manish Pandit, and Mike English

pvcli is a curl-like tool designed to simplify the testing of complex privacy protocols like OHTTP.

Hannah Wang, Ben Yang, and Fisher Darling

We investigated a bug where CUBIC's congestion window became pinned at its minimum floor, causing a performance to plummet. The fix involved correctly measuring idle periods to distinguish RTT wait times from actual application idleness.

Esteban Carisimo and Antonio Vicente

We identified and patched two DDoS vulnerabilities in our QUIC implementation related to packet acknowledgements. Cloudflare customers were not affected. We examine the "Optimistic ACK" attack vector and our solution, which dynamically skips packet numbers to validate client behavior. 

Apoorv Kothari and Louis Navarre

Media over QUIC (MoQ) is a new IETF standard that resolves this conflict, creating a single foundation for sub-second, interactive streaming at a global scale.

Mike English and Renan Dincer

h3i is a command line tool and Rust library designed for low-level testing and debugging of HTTP/3, which runs over QUIC.

Lucas Pardue and Evan Rittenhouse

This blog discusses the introduction of MASQUE to Zero Trust WARP and how Cloudflare One customers will benefit from this modern protocol

Dan Hall

Today, Cloudflare is very excited to announce full support for HTTP/3 Extensible Priorities, a new standard that speeds the loading of webpages by up to 37%

Lucas Pardue and Achiel van der Mandele

With the HTTP/3 RFC celebrating its 1st birthday, we examined HTTP version usage trends between May 2022 - May 2023. We found that HTTP/3 usage by browsers continued to grow, but that search engine and social media bots continued to effectively ignore the latest version of the web’s core protocol

David Belson and Lucas Pardue

HTTP/3 is now RFC 9114. We explore Cloudflare's view of how it is being used

Lucas Pardue and David Belson

We continue our technical deep dive into traditional TCP proxying over HTTP

Lucas Pardue and Christopher Wood

The ability to make TCP and QUIC client connections from within Workers and Durable Objects, as well as the ability to connect to Workers over TCP and QUIC without using HTTP, will be coming to Cloudflare Workers. Here’s a peek at what we’re working on.

James M Snell

It is now possible to connect a Cloudflare Tunnel to the Cloudflare network with QUIC. While doing this, we ran into an interesting connectivity problem unique to UDP.

Sudarsan Reddy

QUIC is a new fast and secure transport protocol. Version 1 has just been published as RFC 9000 and today Cloudflare has enabled support for all customers, come try it out.

Lucas Pardue

How we use gRPC in combination with Kubernetes to improve the performance and usability of internal APIs.

Alex Fattouche

QUIC and HTTP/3 are open standards that have been under development in the IETF for almost exactly 4 years. On October 21, 2020, following two rounds of Working Group Last Call, draft 32 of the family of documents that describe QUIC and HTTP/3 were put into IETF Last Call.

Lucas Pardue

Now that Firefox Nightly supports HTTP/3 we thought we'd share some instructions to help you enable and test it yourselves.

Lucas Pardue

Congestion control and loss recovery play a big role in the QUIC transport protocol performance. We recently added support for CUBIC and HyStart++ to quiche, the library powering Cloudflare's QUIC, and lab-based testing shows promising results for performance in lossy network conditions.

Junho Choi