Cloudflare ya aiwatar da tsari don tallafawa HTTP/3 a cikin NGINX

Kamfanin Cloudflare shirya koyaushe don ba da goyan baya ga ka'idar HTTP/3 a cikin NGINX. An ƙirƙira ƙirar a matsayin ƙari ga ɗakin karatu wanda Cloudflare ya haɓaka quiche tare da aiwatar da ka'idar sufuri ta QUIC da HTTP/3. An rubuta lambar quiche a cikin Rust, amma tsarin NGINX da kansa an rubuta shi cikin C kuma yana shiga ɗakin karatu ta amfani da haɗin kai mai ƙarfi. Ci gaba bude ƙarƙashin lasisin BSD.

Don haɗawa, kawai zazzage faci zuwa nginx 1.16 da lambar quiche dakunan karatu, sannan sake gina nginx tare da zaɓuɓɓukan "-with-http_v3_module -with-quiche=../quiche". Lokacin ginawa, tallafin TLS yakamata ya dogara ne akan ɗakin karatu na BoringSSL ("-with-openssl=../quiche/deps/boringssl"), har yanzu ba a goyan bayan amfani da OpenSSL ba. Don karɓar haɗin kai, kuna buƙatar ƙara umarnin saurare tare da tutar “quic” zuwa saitunan (misali, “saurari 443 quic reuseport”).

A cikin software na abokin ciniki, an riga an ƙara tallafin HTTP/3 zuwa ginin gwaji na Canary Chrome da kuma mai amfani na curl. A gefen uwar garken, har yanzu ya zama dole don amfani da daban, iyakance gwajin aiwatarwa. Ikon aiwatar da HTTP/3 a cikin nginx zai sauƙaƙa sauƙaƙe jigilar sabobin tare da tallafin HTTP/3 kuma zai sa aiwatar da gwajin sabuwar ƙa'idar ta zama mai sauƙi. Bayyanar daidaitaccen tallafi don HTTP/3 a cikin nginx sa ran a cikin reshen 1.17.x na watanni 6-12.

Ka tuna cewa HTTP/3 yana daidaita amfani da ƙa'idar QUIC azaman jigilar HTTP/2. Yarjejeniya QUIC (Haɗin Intanet mai sauri na UDP) Google ya haɓaka tun 2013 a matsayin madadin haɗin TCP + TLS don Yanar gizo, magance matsaloli tare da dogon saiti da lokutan tattaunawa don haɗin kai a cikin TCP da kawar da jinkiri lokacin da fakiti suka ɓace yayin canja wurin bayanai. QUIC wani tsawo ne na ka'idar UDP wanda ke goyan bayan haɓakar haɗin kai da yawa kuma yana ba da hanyoyin ɓoyewa daidai da TLS/SSL.

Main fasali QUIC:

• Babban tsaro mai kama da TLS (ainihin QUIC yana ba da damar yin amfani da TLS akan UDP);
• Gudanar da gaskiya ta gudana, hana asarar fakiti;
• Ikon kafa haɗin kai nan da nan (0-RTT, a cikin kusan 75% na lokuta ana iya watsa bayanai nan da nan bayan aika fakitin saitin haɗin kai) da kuma samar da ɗan jinkiri tsakanin aika buƙatu da karɓar amsa (RTT, Lokacin Tafiya na Zagaye);
• Ba yin amfani da lambar jeri ɗaya ba lokacin da ake sake aikawa da fakiti, wanda ke guje wa shubuha wajen gano fakitin da aka karɓa da kuma kawar da ɓata lokaci;
• Asarar fakiti yana rinjayar kawai isar da rafin da ke da alaƙa da shi kuma baya dakatar da isar da bayanai a cikin magudanan ruwa guda ɗaya waɗanda ke watsa ta hanyar haɗin yanzu;
• Fasalolin gyare-gyaren kuskure waɗanda ke rage jinkiri saboda sake watsa fakitin da suka ɓace. Amfani da lambobin gyara kuskure na musamman a matakin fakiti don rage yanayin da ke buƙatar sake watsa bayanan fakitin da suka ɓace.
• Ƙididdigar toshe iyakokin ƙididdiga suna daidaitawa tare da iyakokin fakitin QUIC, wanda ke rage tasirin asarar fakiti akan ƙaddamar da abubuwan da ke cikin fakiti masu zuwa;
• Babu matsala tare da toshe layin TCP;
• Taimako don gano haɗin haɗin, wanda ke rage lokacin da ake ɗauka don kafa haɗin kai don abokan ciniki na hannu;
• Yiwuwar haɗa manyan hanyoyin sarrafa cunkoso na haɗin gwiwa;
• Yana amfani da dabarun tsinkayar kayan aikin kowane jagora don tabbatar da cewa an aika fakiti a farashi mafi kyau, hana su zama cunkoso da haifar da asarar fakiti;
• Mai ganewa girma aiki da kayan aiki idan aka kwatanta da TCP. Don ayyukan bidiyo irin su YouTube, an nuna QUIC don rage ayyukan tsawatawa lokacin kallon bidiyo da kashi 30%.

source: budenet.ru