{"id":104306,"date":"2022-06-07T09:36:47","date_gmt":"2022-06-07T07:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/protokol-http-3-0-poluchil-status-predlozhennogo-standarta"},"modified":"2022-06-07T09:36:47","modified_gmt":"2022-06-07T07:36:48","slug":"protokol-http-3-0-poluchil-status-predlozhennogo-standarta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/protokol-http-3-0-poluchil-status-predlozhennogo-standarta","title":{"rendered":"The HTTP\/3.0 protocol has received proposed standard status","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The IETF (Internet Engineering Task Force), responsible for the development of internet protocols and architecture, has completed the RFC for the HTTP\/3.0 protocol and published the related specifications under the identifiers RFC 9114 (protocol) and RFC 9204 (QPACK header compression technology for HTTP\/3). The HTTP\/3.0 specification has been designated as a 'Proposed Standard', after which efforts will begin to advance the RFC to the status of Draft Standard, effectively signifying the full stabilization of the protocol and consideration of all feedback received. Updated versions of specifications for HTTP\/1.1 (RFC 9112) and HTTP\/2.0 (RFC 9113) have also been published, along with documents defining the semantics of HTTP requests (RFC 9110) and HTTP cache control headers (RFC 9111). <\/p>\n
The HTTP\/3 protocol defines the use of the QUIC (Quick UDP Internet Connections) protocol as the transport for HTTP\/2. QUIC is an overlay on the UDP protocol that supports multiplexing of multiple connections and provides encryption methods equivalent to TLS\/SSL. The protocol was created in 2013 by Google as an alternative to the TCP+TLS combination for the Web, addressing issues with high connection setup times and handshakes in TCP, and eliminating delays caused by packet losses during data transmission.
<\/center> <\/p>\n
Currently, support for QUIC and HTTP\/3.0 has been implemented in all major web browsers (in Chrome, Firefox, and Edge, HTTP\/3 support is enabled by default, while in Safari it requires enabling the 'Advanced > Experimental Features > HTTP\/3' setting). On the server side, implementations of HTTP\/3 are available for nginx (in a dedicated branch and as a separate module), Caddy, IIS, and LiteSpeed. Cloudflare's content delivery network also supports HTTP\/3. <\/p>\n
Key features of QUIC: <\/p>\n
\n
High security, similar to TLS (essentially QUIC provides the possibility of using TLS over UDP); <\/li>\n
Stream integrity control that prevents packet loss; <\/li>\n
The ability to establish connections instantly (0-RTT, allowing data to be sent immediately after sending the connection establishment packet in about 75% of cases) and to ensure minimal delays between sending a request and receiving a response (RTT, Round Trip Time);
<\/center> <\/li>\n
Using a different sequence number when retransmitting a packet, which helps eliminate ambiguity in identifying received packets and avoids timeouts; <\/li>\n
Packet loss only affects the delivery of the associated stream and does not halt the delivery of data in parallel streams sent over the current connection; <\/li>\n
Error correction mechanisms that minimize delays caused by retransmitting lost packets. Utilizing special error correction codes at the packet level to reduce situations requiring the retransmission of lost packet data. <\/li>\n
The boundaries of cryptographic blocks are aligned with the boundaries of QUIC packets, reducing the impact of packet loss on the decoding of subsequent packet contents; <\/li>\n
No queue blocking issues as with TCP; <\/li>\n
Support for connection identifiers that reduce the time needed to establish a reconnection for mobile clients; <\/li>\n
The possibility of incorporating advanced congestion control mechanisms; <\/li>\n
The use of bandwidth prediction techniques in each direction to ensure optimal packet transmission intensity, preventing a fall into a state of congestion where packet loss occurs; <\/li>\n
A noticeable increase in performance and bandwidth compared to TCP. For video services like YouTube, the use of QUIC has shown a reduction in buffering operations while watching videos by 30%. <\/ul>\n
Among the changes in the HTTP\/1.1 specification, a prohibition on the isolated use of the carriage return (CR) character outside of content bodies is noteworthy; i.e., in protocol elements, the CR character may only be used together with the line feed character (CRLF). The chunked request formatting algorithm has been refined to simplify the separation of attached fields and the header section. Recommendations for handling ambiguous content have been added to block 'HTTP Request Smuggling' attacks that allow intrusions into the content of other users' requests in the stream between the frontend and backend. <\/p>\n
The HTTP\/2.0 specification update clearly defines support for TLS 1.3. The method for defining priorities and associated fields in headers has been moved to the deprecated category. The unadopted mechanism for connection upgrade from HTTP\/1.1 is marked as deprecated. Requirements for field names and value verification have been simplified. Some previously reserved frame types and parameters have been proposed for use. The prohibited header fields related to connections are more precisely defined. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"The](\"\/wp-content\/uploads\/2022\/06\/0821fd634337ac1f1cc0924abb4f55dc.jpg\")
<\/center> <\/p>\n![\"The](\"\/wp-content\/uploads\/2022\/06\/d416668e500fd2b79304fa0b13f793e3.jpg\")
<\/center> <\/li>\n