You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "pmkol (via GitHub)" <gi...@apache.org> on 2024/09/22 18:49:47 UTC
[I] Add HTTP/3 support to the openssl-quic1 repository [trafficserver]
pmkol opened a new issue, #11781:
URL: https://github.com/apache/trafficserver/issues/11781
I have found that the current HTTP/3 in version 10.0 is implemented via Quiche. It might be possible to achieve this using [openssl-quic1](https://github.com/quictls/openssl), which supports the BoringSSL API while being fully compatible with OpenSSL. This OpenSSL repository is maintained by Akamai and Microsoft, offering better support for QUIC and reducing the complexity of compiling HTTP/3 in ATS. Could the project team support this QUIC repository?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add HTTP/3 support to the openssl-quic1 repository [trafficserver]
Posted by "bryancall (via GitHub)" <gi...@apache.org>.
bryancall commented on issue #11781:
URL: https://github.com/apache/trafficserver/issues/11781#issuecomment-4828155852
Thanks for the suggestion. Building HTTP/3 against the OpenSSL/quictls fork (openssl-quic1) is already supported today: you build quiche with its openssl feature instead of BoringSSL, and Apache Traffic Server will use it. The build script does exactly this, see [tools/build_openssl_h3_tools.sh](https://github.com/apache/trafficserver/blob/master/tools/build_openssl_h3_tools.sh#L131), where quiche is built with the openssl feature flag.\n\nWorth clarifying the deeper question too: the OpenSSL fork only provides the Transport Layer Security primitives QUIC needs, not a QUIC implementation. Apache Traffic Server 9.2.x had our own QUIC implementation that used that fork, but we dropped it in 10.0 and switched to quiche because we do not have the resources to maintain a homegrown QUIC stack. So the path forward is quiche, and it can be built against OpenSSL/quictls as shown above.\n\nSince the OpenSSL-backed build already works and the native-implementation direction was a deliberate
maintenance decision, I am closing this. Please reopen if you hit a specific problem building quiche against OpenSSL.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add HTTP/3 support to the openssl-quic1 repository [trafficserver]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #11781:
URL: https://github.com/apache/trafficserver/issues/11781#issuecomment-3326179016
This issue has been automatically marked as stale because it has not had recent activity. Marking it stale to flag it for further consideration by the community.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add HTTP/3 support to the openssl-quic1 repository [trafficserver]
Posted by "brbzull0 (via GitHub)" <gi...@apache.org>.
brbzull0 commented on issue #11781:
URL: https://github.com/apache/trafficserver/issues/11781#issuecomment-2368019366
Hi @pmkol , this is already possible. You can build quiche using openssl istead of borinssl and ATS will use it.
Have a look at this [script](https://github.com/apache/trafficserver/blob/master/tools/build_openssl_h3_tools.sh#L119) which builds quiche with openssl support.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add HTTP/3 support to the openssl-quic1 repository [trafficserver]
Posted by "maskit (via GitHub)" <gi...@apache.org>.
maskit commented on issue #11781:
URL: https://github.com/apache/trafficserver/issues/11781#issuecomment-2369671137
@pmkol Are you actually wondering if ATS can use the openssl fork to support QUIC without using Quiche? As you may know the openssl fork only provides functions that are required to implement QUIC. It does not provide QUIC implementation. ATS 9.2.x supported the openssl fork and we had own QUIC implementation, but we dropped it and switched to using Quiche on 10.0 because we don't have enough resource/time to maintain our own QUIC implementation.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Add HTTP/3 support to the openssl-quic1 repository [trafficserver]
Posted by "bryancall (via GitHub)" <gi...@apache.org>.
bryancall closed issue #11781: Add HTTP/3 support to the openssl-quic1 repository
URL: https://github.com/apache/trafficserver/issues/11781
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org