envoyproxy / envoy-openssl

Envoy OpenSSL extensions
Apache License 2.0
47 stars 45 forks source link

QUIC UDP & http3 review #57

Open cfilleke opened 2 years ago

cfilleke commented 2 years ago

Which verison of OpenSSL will have QUIC support?

https://youtu.be/cdb7M37o9sU

cfilleke commented 2 years ago

@mattklein123 please add Ruslan Mstoi github.com/rmstoi to envoyproxy org & opensssl-dev team so we can assign this to him. thanks!

twghu commented 2 years ago

Envoy relies on BoringSSL to support QUIC/HTTP3

OpenSSL requires an Akamai patch to support. This currently breaks the integrity for FIPS.

  1. Identify OpenSSL 3.x support plans for QUIC
  2. Identify use of BoringSSL calls to support QUIC functionality in Envoy
  3. Identify implementation issues with OpenSSL