Re: Thoughts on QUIC/HTTP3

2022-07-09 Thread Shawn Heisey
On 7/9/22 18:08, William Lallemand wrote: But is there any certificates in the /opt/quictls/ssl/certs/ directory ? No, it is empty.  I didn't think to actually look inside it because it didn't occur to me that it would be empty.  I just checked an install of stock openssl 3 and it also has

Re: Thoughts on QUIC/HTTP3

2022-07-09 Thread William Lallemand
On Fri, Jul 08, 2022 at 09:11:02AM -0600, Shawn Heisey wrote: > > The openssl that haproxy is compiled against is in /opt/quictls/ssl ... > but there is a distribution-provided openssl package in /usr/lib/ssl as > well.  Both locations contain "certs". > But is there any certificates in the

Re: Thoughts on QUIC/HTTP3

2022-07-08 Thread Shawn Heisey
On 7/8/22 03:30, William Lallemand wrote: HAProxy uses the ca-certificates provided by OpenSSL. The SSL_CERT_DIR by default is set to the "certs" directory inside your openssldir. You can check your openssldir by using the "openssl" binary you compiled with your library (not the one of your

Re: Thoughts on QUIC/HTTP3

2022-07-08 Thread William Lallemand
On Thu, Jul 07, 2022 at 07:53:24AM -0600, Shawn Heisey wrote: > On 7/6/22 09:50, Илья Шипицин wrote: > > haproxy is built in CI against latest quictls, for example quictls-3.0.5 > > > > https://github.com/haproxy/haproxy/runs/721404?check_suite_focus=true > > > > please open an issue on github

Re: Thoughts on QUIC/HTTP3

2022-07-07 Thread Shawn Heisey
On 7/6/22 09:50, Илья Шипицин wrote: haproxy is built in CI against latest quictls, for example quictls-3.0.5 https://github.com/haproxy/haproxy/runs/721404?check_suite_focus=true please open an issue on github with failure details, no known build failures so far Shortly after I saw

Re: Thoughts on QUIC/HTTP3

2022-07-06 Thread Илья Шипицин
ср, 6 июл. 2022 г. в 19:11, Shawn Heisey : > On 5/31/22 08:16, Amaury Denoyelle wrote: > > Thanks for your continuing your journey on HTTP/3 :) > > Yesterday I pulled down the haproxy 2.6 and quictls git repos. The > branch for quictls was openssl-3.0.4+quic. I built and installed > quictls and

Re: Thoughts on QUIC/HTTP3

2022-07-06 Thread Shawn Heisey
On 5/31/22 08:16, Amaury Denoyelle wrote: Thanks for your continuing your journey on HTTP/3 :) Yesterday I pulled down the haproxy 2.6 and quictls git repos. The branch for quictls was openssl-3.0.4+quic.  I built and installed quictls and then haproxy. This combination is working better

Re: Thoughts on QUIC/HTTP3

2022-05-31 Thread Amaury Denoyelle
On Sun, May 29, 2022 at 12:37:14PM -0600, Shawn Heisey wrote: > On 4/29/2022 10:10 AM, Shawn Heisey wrote: > > I did a build and install this morning, a bunch of quic-related changes > > in that.  Now everything seems to be working on my paste site.  Large > > pastes work, and I can reload the

Re: Thoughts on QUIC/HTTP3

2022-05-29 Thread Илья Шипицин
пн, 30 мая 2022 г. в 00:56, Shawn Heisey : > On 5/29/2022 12:49 PM, Илья Шипицин wrote: > > roundcube runs automatic browser tests > > > > > https://github.com/roundcube/roundcubemail/runs/6642129873?check_suite_focus=true > > > > I think we can try to run those tests with haproxy between browser

Re: Thoughts on QUIC/HTTP3

2022-05-29 Thread Shawn Heisey
On 5/29/2022 12:49 PM, Илья Шипицин wrote: roundcube runs automatic browser tests https://github.com/roundcube/roundcubemail/runs/6642129873?check_suite_focus=true I think we can try to run those tests with haproxy between browser and roundcube That looks cool.  Are there instructions

Re: Thoughts on QUIC/HTTP3

2022-05-29 Thread Илья Шипицин
вс, 29 мая 2022 г. в 23:40, Shawn Heisey : > On 4/29/2022 10:10 AM, Shawn Heisey wrote: > > I did a build and install this morning, a bunch of quic-related > > changes in that. Now everything seems to be working on my paste > > site. Large pastes work, and I can reload the page a ton of times >

Re: Thoughts on QUIC/HTTP3

2022-05-29 Thread Shawn Heisey
On 4/29/2022 10:10 AM, Shawn Heisey wrote: I did a build and install this morning, a bunch of quic-related changes in that.  Now everything seems to be working on my paste site.  Large pastes work, and I can reload the page a ton of times without it hanging until browser restart. I have

Re: Thoughts on QUIC/HTTP3

2022-04-29 Thread Shawn Heisey
On 4/25/22 10:55, Shawn Heisey wrote: I was testing with the master branch from https://github.com/haproxy/haproxy.git. Just pulled down the latest changes, built it, and installed it.  Now I am sometimes seeing different behavior on the large POST.  It will load a page quickly sometimes,

Re: Thoughts on QUIC/HTTP3

2022-04-25 Thread Shawn Heisey
On 4/25/22 08:13, Amaury Denoyelle wrote: I would not put too much faith in it for the near future. The OpenSSL team seems to have put aside a simple QUIC API integration in favor of a brand new full QUIC stack, which should take quite some time. So for now, manually rebuilding your SSL library

Re: Thoughts on QUIC/HTTP3

2022-04-25 Thread Amaury Denoyelle
Hi, Sorry for not having answers your last mails, I was busy with some new improvment for QUIC on haproxy side. Most notably, we improved the transfer performance slightly by being able to use multiple buffers per streams. Please find my answers to your remarks below, On Sat, Apr 23, 2022 at