Folks, Can I suggest calling it quic as opposed to https
do we want PF Firewal to match https for TCP and UDP (for traditional) servers that only require https TCP ... Just a thought On Thu, 25 May 2023 at 10:27, Stuart Henderson <s...@spacehopper.org> wrote: > > ----- Forwarded message from Renaud Allard <ren...@allard.it> ----- > > From: Renaud Allard <ren...@allard.it> > Date: Thu, 25 May 2023 10:48:24 +0200 > To: po...@openbsd.org > User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 > Thunderbird/102.9.0 > Subject: Re: http3 in nginx > > > > On 5/24/23 18:01, Theo Buehler wrote: > > This isn't intended for commit, but if anyone wants to play with quic > > in nginx, this diff is all that's needed. Build, then install the main > > package. The config is documented here: > > > > https://nginx.org/en/docs/http/ngx_http_v3_module.html > > > > Works for me. > > > > It might be a good idea to add this to /etc/services too > > https 443 udp http protocol over TLS/SSL > > ----- <snip> ----- > > while I would not use quite that description (it comes from the > IANA registry, but afaik there is no way this is going to work over > anything old enough to be called SSL), I think it is correct to add > this, we do want it populated in net.inet.udp.baddynamic. > > https://www.rfc-editor.org/rfc/rfc9110.html > > ok? > > > Index: services > =================================================================== > RCS file: /cvs/src/etc/services,v > retrieving revision 1.104 > diff -u -p -r1.104 services > --- services 2 Mar 2022 11:43:52 -0000 1.104 > +++ services 25 May 2023 09:14:49 -0000 > @@ -118,6 +118,7 @@ svrloc 427/tcp # > Server Location > svrloc 427/udp > nnsp 433/tcp usenet # Network News Transfer > https 443/tcp # secure http (TLS) > +https 443/udp # secure http (TLS) > snpp 444/tcp # Simple Network Paging > Protocol > microsoft-ds 445/tcp # Microsoft-DS > microsoft-ds 445/udp # Microsoft-DS > -- Kindest regards, Tom Smyth.
