[quicwg/base-drafts] stateful routing by intermediaries (#821)

[jpinner-lyft <[e-mail]>]

Intermediaries in a QUIC connection do not (and cannot) participate in transport parameter negotiation and endpoints in a connection may not be able to configure or even have knowledge of any intermediaries. Nonetheless, those intermediaries may require connection id to do proper address translation or connection management but have no way to signal to the endpoints that the `omit_connection_id` parameter must not be set.

In particular intermediaries (especially those acting on behalf of, or in concert with, the client and server -- e.g. L4 load-balancers, client gateways, configured proxies) that attempt to manage routing through address migration or NAT re-bindings would require connection ids in both directions.

Further, some aspects of client privacy are currently assumed to be achieved by clients not sending a connection id but the specification does not require this. And some aspects of connection id migration require the servers to send the client a new connection id preemptively which they are not currently required to do. Simply requiring connection ids without requiring the servers to provide clients with the ability to migrate them does not seem to provide sufficient privacy.

My suggestion here would be to modify the specification to always require connection ids be sent by both endpoints and further require endpoints to exchange the necessary information that allows connection id migration to be initiated at will by the client.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/821