quiche (Cloudflare project)

quiche (Cloudflare project)
Name	quiche
Developer	Cloudflare
Written in	Rust
License	BSD-2-Clause
Initial release	2019
Repository	GitHub

quiche (Cloudflare project) is an open-source implementation of the QUIC and HTTP/3 protocols developed and maintained by Cloudflare. It is implemented in Rust and intended for high-performance, secure, and portable use across platforms such as Linux, FreeBSD, macOS, Windows, Android, and iOS. quiche is positioned among other protocol libraries and projects like ngtcp2, BoringSSL, libuv, OpenSSL, and nginx for use in edge, CDN, and proxy environments.

Overview

quiche was announced by Cloudflare as part of efforts to accelerate deployment of QUIC and HTTP/3 across the Internet, joining initiatives like IETF working groups, Mozilla experiments, and Google's internal deployments. The project targets interoperability with implementations from Google (company), Facebook, and open-source stacks such as ngtcp2 and msquic. quiche emphasizes memory safety via Rust, cryptographic integration with BoringSSL, and cross-language bindings for ecosystems including C, Python, and Go.

Architecture and Components

The quiche codebase separates concerns into modules comparable to architectures in nginx, Envoy, and HAProxy. Core components include a QUIC packet parsing and connection state machine inspired by IETF drafts, a TLS integration layer compatible with TLS 1.3 implementations, and stream multiplexer routines analogous to designs in HTTP/2 stacks used by Apache HTTP Server and Lighttpd. quiche provides bindings and APIs for integration with server software such as nginx, client libraries like curl, and frameworks including Tokio and libev. It also contains test suites and fuzzing harnesses comparable to those used by LLVM's libFuzzer and American Fuzzy Lop.

Protocol Support and Features

quiche implements features defined in IETF QUIC and HTTP/3 specifications, including connection migration, 0-RTT handshakes, and stream prioritization ideas discussed in drafts alongside work from IETF HTTP Working Group. It interoperates with congestion control algorithms such as CUBIC, BBR, and pacing strategies similar to those researched at MIT and Stanford University. quiche supports QUIC transport parameters, selective acknowledgment (SACK) semantics, and path MTU discovery techniques used by stacks like Linux kernel implementations. The project also exposes APIs for framing, datagram extensions, and proof of concepts for QUIC loss recovery used by Facebook and Google.

Performance and Benchmarks

Cloudflare published benchmark-oriented results comparing quiche to other implementations such as ngtcp2 and msquic on platforms including Linux kernel distributions and FreeBSD. Benchmarks often reference throughput, latency, CPU utilization, and memory overhead similar to analyses conducted by Akamai Technologies and academic evaluations from Carnegie Mellon University and ETH Zurich. quiche's Rust foundations yield low-allocation runtimes, enabling deployments at the scale of Cloudflare's edge network and enabling comparison with high-performance stacks like NGINX Unit and Envoy.

Security and Auditing

Security considerations for quiche mirror practices in cryptographic projects such as OpenSSL, BoringSSL, and LibreSSL; the project leverages Rust for memory safety and integrates TLS implementations vetted in contexts like IETF TLS Working Group deliberations. quiche includes fuzzing targets and continuous-integration testing similar to programs used by Google OSS-Fuzz and conducts code review workflows used at Cloudflare and other major open-source organizations like Mozilla. Vulnerability handling follows disclosure processes practiced by CERT Coordination Center and MITRE's Common Vulnerabilities and Exposures program.

Adoption and Integrations

quiche has been integrated into Cloudflare's production edge, adopted experimentally by projects such as curl, bindings for nginx, and client experiments by Mozilla and Google Chrome teams. It has been used in interoperability events alongside IETF interop tests and seen in comparative adoption discussions with msquic used by Microsoft and ngtcp2 used by various open-source clients. quiche's cross-platform support facilitates inclusion in operating environments from Linux-based CDNs to mobile platforms like Android and iOS via language bindings for C and Python.

Development and Licensing

quiche is developed in public repositories under GitHub, following contribution models similar to projects at Cloudflare, Mozilla, and Linux Foundation-hosted initiatives. The code is licensed under the BSD 2-clause license, aligning with permissive licenses used by FreeBSD and many networking libraries. The project accepts bug reports, patches, and feature requests via issue trackers and pull requests and participates in community events including IETF meetings and interop testing coordinated with organizations like Internet Society.

Category:Free software