Proxying HTTP/3 (QUIC) with Envoy's CONNECT-UDP

Proxying HTTP/3 (QUIC) Using CONNECT-UDP with Envoy - Jeongseok Son, Google

The HTTP CONNECT method is capable of proxying TCP-based traffic such as HTTP/1.1, HTTP/2, and TLS. However, it cannot proxy non-TCP traffic such as HTTP/3 based on QUIC. To address this limitation, IETF MASQUE Working Group has adopted new specifications extending HTTP to proxy traffic running on top of protocols other than TCP. In this talk, I will explain CONNECT-UDP and other relevant protocol standardization for establishing UDP tunnels over HTTP. Then, I will describe how CONNECT-UDP was recently implemented in Envoy Proxy and walk through the steps required to set up an Envoy Proxy for tunneling QUIC or UDP over HTTP. Finally, I will share the potential use cases of CONNECT-UDP with Envoy for enhancing the privacy, security, and performance of proxying.