简体繁体 English

如果浏览器不支持 quic，http3/quic 是否会退回到 tls 1.2？

[英]Does http3/quic fall back to tls 1.2 if the browser doesn't support quic?

原文 2020-04-12 13:29:00 4 1 go/ nginx/ http3

Even after lots of googling, I'm pretty naive about quic.即使经过大量的谷歌搜索，我对 quic 还是很天真。 I'm specifically looking into lucasclemente/go-quic.我正在专门研究 lucasclemente/go-quic。

Should quic servers use 443? quic 服务器应该使用 443 吗？ If so, will it fallback to http2 & tls 1.2?如果是这样，它会回退到 http2 和 tls 1.2 吗？ I'm speaking generally.我说的一般。 Not for that specific go package.不适用于特定的 go package。 But if you have specifics for that go package, that would be great.但是，如果您有 go package 的详细信息，那就太好了。

Yes, I realize quic is still young and not necessary yet.是的，我意识到 quic 还很年轻，还没有必要。 I'm simply curious and couldn't find that specific answer.我只是好奇，找不到那个具体的答案。 Thanks!谢谢！

1 个解决方案

Quic servers can use any port they want; Quic 服务器可以使用他们想要的任何端口； 443 is often used, but this is not necessary at all. 443经常被使用，但这根本没有必要。 Note we're talking about UDP ports, not TCP ports.请注意，我们谈论的是 UDP 端口，而不是 TCP 端口。

A QUIC server cannot fallback to HTTP2 or TLS 1.2, because if the client sends a QUIC request, the server can only respond with a QUIC response. QUIC 服务器不能回退到 HTTP2 或 TLS 1.2，因为如果客户端发送 QUIC 请求，服务器只能以 QUIC 响应进行响应。 If the browser doesn't support QUIC, it will not send a QUIC request in the first place, so there is no issue at all.如果浏览器不支持QUIC，一开始就不会发送QUIC请求，所以完全没有问题。

I think you are assuming that a QUIC server runs (or can run) on the same port as HTTPS and therefore has to generate either a QUIC or an HTTPS response;我认为您假设 QUIC 服务器在与 HTTPS 相同的端口上运行（或可以运行），因此必须生成 QUIC 或 HTTPS 响应； this is not the case, as QUIC is running over UDP, not over TCP (like HTTP and HTTPS do).情况并非如此，因为 QUIC 在 UDP 上运行，而不是在 TCP 上运行（如 HTTP 和 Z0E832363F9A4B04FD1）。 TCP ports and UDP ports are different address spaces, so one can run an HTTPS server on tcp port 443 and simultaneously run another QUIC server on udp port 443. TCP ports and UDP ports are different address spaces, so one can run an HTTPS server on tcp port 443 and simultaneously run another QUIC server on udp port 443.