QUIC / HTTP/3 support status

[errorxyz]

Issue to track the support status for QUIC / HTTP/3

	Reverse Proxy	Local	Transparent
cURL1 (Windows)	✅2	✅
cURL (Linux)	✅	N/A
cURL (macOS)	✅	✅
Chrome3 (Linux)	✅	N/A
Chrome3 (Windows)	✅	✅
Firefox (Linux)	✅	N/A
Firefox (Windows)	✅	✅

Set experimental_transparent_http3=true for local/wireguard/transparent modes

HTTP/3 enabled websites used for testing:
https://cloudflare-quic.com/
https://quic.nginx.org/
https://http3.is/

Wireguard mode is not supported because HTTP3 + VPN does not work very well

Current TODOs

• Handle fragmented QUIC client hello #7067
• Merge https and http3 reverse-proxy modes #7114
• Addon to update the ports in alt-svc header in reverse mode #7093
• QUIC layer does not handle StopSendingReceived event #7112
• HTTP3 over local mode: Unable to access certain websites using firefox via HTTP3 #7117
• HTTP3 reverse proxy: Handshake fails when accessing using IP via firefox #7111
• More testing

Note: This page is heavily edited as we discover new information

Footnotes

1. all cURL builds used are from https://github.com/stunnel/static-curl/releases for --http3-only support ↩

2. https://github.com/mitmproxy/mitmproxy/issues/7033 ↩

3. clear browser cache if it doesn't work ↩ ↩²

[mhils]

Here's the error I'm seeing with (static-curl, macOS, local mode):

results

> ./curl --http3-only https://http3.is -k -vvv --resolve http3.is:443:151.101.129.91
* Added http3.is:443:151.101.129.91 to DNS cache
* Hostname http3.is was found in DNS cache
*   Trying 151.101.129.91:443...
* Server certificate:
*  subject: CN=http3.is
*  start date: Jul 22 20:33:48 2024 GMT
*  expire date: Jul 24 20:33:48 2025 GMT
*  issuer: CN=mitmproxy; O=mitmproxy
*  SSL certificate verify result: self-signed certificate in certificate chain (19), continuing anyway.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
* Connected to http3.is (151.101.129.91) port 443
* using HTTP/3
* [HTTP/3] [0] OPENED stream for https://http3.is/
* [HTTP/3] [0] [:method: GET]
* [HTTP/3] [0] [:scheme: https]
* [HTTP/3] [0] [:authority: http3.is]
* [HTTP/3] [0] [:path: /]
* [HTTP/3] [0] [user-agent: curl/8.9.0]
* [HTTP/3] [0] [accept: */*]
> GET / HTTP/3
> Host: http3.is
> User-Agent: curl/8.9.0
> Accept: */*
>
* Request completely sent off
* error:80000020:system library::Broken pipe
* Connection #0 to host http3.is left intact
curl: (56) error:80000020:system library::Broken pipe

mitmdump --mode local:curl -vvv --set proxy_debug --set connection_strategy=lazy
[20:38:44.593] Using existing mitmproxy redirector app.
[20:38:44.593] Initializing macOS proxy ...
[20:38:44.594] Starting redirector app...
[20:38:44.632] Redirector app exited successfully.
[20:38:44.632] Waiting for control channel...
[20:38:44.695] Control channel connected.
[20:38:44.695] macOS proxy successfully initialized.
[20:38:44.695] Local redirector started.
[20:38:46.688][192.0.0.2:0] client connect
[20:38:46.688][192.0.0.2:0]   >> Start({})
[20:38:46.688][192.0.0.2:0]     >> Start({})
[20:38:46.689][192.0.0.2:0]   >> DataReceived(client, b'\xcd\x00\x00\x00\x01\x08\x0c\x06\xc0\x10+`\xb7\xd6\x00\x00D\x9e\xac\xa8\xb2\r,Xv\xe6\xcfZ\xe6\xd9\\i}\xe7\xa6\x14 \xa1KII\x98w\x9c\x8a|m\x91h\xab\xbb*g\xb1R\x7f\x12q\xe2\x1bx\x16\x86]-\xef\x8a\x02\x8b\x88\x08\xd0p*\x05I\xb4D\x92\xb0;N\xadJ\xafs\x13\xd5\xf7w\xd0c;<Ld;[z\xf8P\x81{r:\x92f]1\x01\xd0\xa3\xaa+\xf4\x12Z\x93\xf1F#\x90\x94r\x87\x0c[\x88z\x12\x1d\xbd\x01\xe7\x04\xeb\x9fag6\x82\xb0n5\x9d:\x9c\xd7\x04\xc4JI\xce\x07\xc9\xa1\x04\xcc\xdf\xb8n\xfc\x08\xa3\xc5L\xe1K=\x0fH%\x8a|\x9f…
[20:38:46.689][192.0.0.2:0]     >> DataReceived(client, b'\xcd\x00\x00\x00\x01\x08\x0c\x06\xc0\x10+`\xb7\xd6\x00\x00D\x9e\xac\xa8\xb2\r,Xv\xe6\xcfZ\xe6\xd9\\i}\xe7\xa6\x14 \xa1KII\x98w\x9c\x8a|m\x91h\xab\xbb*g\xb1R\x7f\x12q\xe2\x1bx\x16\x86]-\xef\x8a\x02\x8b\x88\x08\xd0p*\x05I\xb4D\x92\x…
[20:38:46.689][192.0.0.2:0]     << NextLayerHook(data=NextLayer:None)
[20:38:46.689][192.0.0.2:0]   << NextLayerHook(data=NextLayer:None)
[20:38:46.691][192.0.0.2:0]   >> Reply(NextLayerHook(data=NextLayer:ServerQuicLayer(inactive)), None)
[20:38:46.691][192.0.0.2:0]     >> Reply(NextLayerHook(data=NextLayer:ServerQuicLayer(inactive)), None)
[20:38:46.691][192.0.0.2:0]     [nextlayer] ServerQuicLayer(inactive)
[20:38:46.691][192.0.0.2:0]     >> Start({})
[20:38:46.691][192.0.0.2:0]       >> Start({})
[20:38:46.691][192.0.0.2:0]     >> DataReceived(client, b'\xcd\x00\x00\x00\x01\x08\x0c\x06\xc0\x10+`\xb7\xd6\x00\x00D\x9e\xac\xa8\xb2\r,Xv\xe6\xcfZ\xe6\xd9\\i}\xe7\xa6\x14 \xa1KII\x98w\x9c\x8a|m\x91h\xab\xbb*g\xb1R\x7f\x12q\xe2\x1bx\x16\x86]-\xef\x8a\x02\x8b\x88\x08\xd0p*\x05I\xb4D\x92\xb0;N\xadJ\xafs\x13\xd5\xf7w\xd0c;<Ld;[z\xf8P\x81{r:\x92f]1\x01\xd0\xa3\xaa+\xf4\x12Z\x93\xf1F#\x90\x94r\x87\x0c[\x88z\x12\x1d\xbd\x01\xe7\x04\xeb\x9fag6\x82\xb0n5\x9d:\x9c\xd7\x04\xc4JI\xce\x07\xc9\xa1\x04\xcc\xdf\xb8n\xfc\x08\xa3\xc5L\xe1K=\x0fH%\x8a|\x9f…
[20:38:46.692][192.0.0.2:0]       >> DataReceived(client, b'\xcd\x00\x00\x00\x01\x08\x0c\x06\xc0\x10+`\xb7\xd6\x00\x00D\x9e\xac\xa8\xb2\r,Xv\xe6\xcfZ\xe6\xd9\\i}\xe7\xa6\x14 \xa1KII\x98w\x9c\x8a|m\x91h\xab\xbb*g\xb1R\x7f\x12q\xe2\x1bx\x16\x86]-\xef\x8a\x02\x8b\x88\x08\xd0p*\x05I\xb4D\x92\x…
[20:38:46.693][192.0.0.2:0]       << TlsClienthelloHook(data=ClientHelloData(context=Context(
        Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'h3'], 'sni': 'http3.is', 'timestamp_start': 1721846326.6884422, 'proxy_mode': ProxyMode.parse('local:curl')}),
        Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'transport_protocol': 'udp', 'tls': True}),
        layers=[[TransparentProxy…
[20:38:46.693][192.0.0.2:0]     << TlsClienthelloHook(data=ClientHelloData(context=Context(
[20:38:46.693][192.0.0.2:0]     << TlsClienthelloHook(data=ClientHelloData(context=Context(
[20:38:46.693][192.0.0.2:0]   << TlsClienthelloHook(data=ClientHelloData(context=Context(
[20:38:46.693][192.0.0.2:0]   >> Reply(TlsClienthelloHook(data=ClientHelloData(context=Context(
    Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'h3'], 'sni': 'http3.is', 'timestamp_start': 1721846326.6884422, 'proxy_mode': ProxyMode.parse('local:curl')}),
    Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'transport_protocol': 'udp', 'tls': True}),
    layers=[[Transparen…
[20:38:46.694][192.0.0.2:0]     >> Reply(TlsClienthelloHook(data=ClientHelloData(context=Context(
[20:38:46.694][192.0.0.2:0]       >> Reply(TlsClienthelloHook(data=ClientHelloData(context=Context(
[20:38:46.694][192.0.0.2:0]       << QuicStartClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'h3'], 'sni': 'http3.is', 'timestamp_start': 1721846326.6884422, 'proxy_mode': ProxyMode.parse('local:curl')}), context=Context(
        Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionSta…
[20:38:46.694][192.0.0.2:0]     << QuicStartClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'h3'], …
[20:38:46.694][192.0.0.2:0]   << QuicStartClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'h3'], …
[20:38:46.699][192.0.0.2:0]   >> Reply(QuicStartClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'h3'], 'sni': 'http3.is', 'timestamp_start': 1721846326.6884422, 'proxy_mode': ProxyMode.parse('local:curl')}), context=Context(
    Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <Connect…
[20:38:46.699][192.0.0.2:0]     >> Reply(QuicStartClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'…
[20:38:46.699][192.0.0.2:0]       >> Reply(QuicStartClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': [b'…
[20:38:46.702][192.0.0.2:0]       << SendData(client, b'\xc7\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdb\x00D\x9e\xc9m}t\xf5\xc3bl\xc0\x8b;#VE\xba]#\x98\x0f\xee\xfd\x80g\xbbY\xb0Q\x9e\x9a\x02\x13\x0f\xed\x1c\xe3=\x98\x06/U\x1c\xbd\x98O\xa5^A\xe5\x0f{\x03\xde\xdcxY\xc1z\xfar J\x10\x17\xff\x0f IU\xbb\xaf\x9e\xfcb\xcd\xf7\x0ci\xa2\x14\x83\xcfw+\xc7i\xec\xbdu\x0b\xa4Z\xa4\xff?\xfc\xee\xa2\xe3{\\\xaa\xe4\x11bYu\x91,\xda\x1b\xc2\x12X\xfb\\\x1b;\xe3\xfc\r\x8b\x95\xbf\x0e\xe7Y\xbe\xf2%\'}D\xa5\xa7\x10{\x16g.\xc7\xfc\xd3\xbf>\x9eBE\x9d)\xd4~\xc4\…
[20:38:46.702][192.0.0.2:0]     << SendData(client, b'\xc7\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdb\x00D\x9e\xc9m}t\xf5\xc3bl\xc0\x8b;#VE\xba]#\x98\x0f\xee\xfd\x80g\xbbY\xb0Q\x9e\x9a\x02\x13\x0f\xed\x1c\xe3=\x98\x06/U\x1c\xbd\x98O\xa5^A\xe5\x0f{\x03\xde\xdcxY\xc1z\xfar J\x10\x17\xf…
[20:38:46.702][192.0.0.2:0]   << SendData(client, b'\xc7\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdb\x00D\x9e\xc9m}t\xf5\xc3bl\xc0\x8b;#VE\xba]#\x98\x0f\xee\xfd\x80g\xbbY\xb0Q\x9e\x9a\x02\x13\x0f\xed\x1c\xe3=\x98\x06/U\x1c\xbd\x98O\xa5^A\xe5\x0f{\x03\xde\xdcxY\xc1z\xfar J\x10\x17\xf…
[20:38:46.702][192.0.0.2:0]       << SendData(client, b'\xe3\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdbD\x9f\x9fU\xfb\x8d\xb6>\xa7\xc4\x9a\xec;\x8d\xffG*B*l`5\x07\xc2\xd7d`\xf9\xa23f\x14f\xa4\x8a\xf6\x86WxB\x8f&=\xa6\x0c\x8c\x91\xe6\x84\x84\x96\xe5h\xdb\xe5\x94F\xda\x82\xbf\xe6\x0ep\x9f\x9f\xee\xeb7&\x8f\xdcF\xa2\x02\r\x8d9\xe6z\xab1\xd8)d/\x86\x0f\x80\xea\x8f\x18\x14H\x825F\xda\x11tn\x9e\xca\xd0c\x0fv\x9c\xdbh\xdee_\xffsh3\xb7\x19\xbd\x17k\xc5\x92\xec\x90\x9eX\x08\x7f\x1f\x00\xd52\x91Pe\xdc\xa2~\xec\x14\xd0\x92\xae\xfe\x93\x17\xdf\xf1\…
[20:38:46.702][192.0.0.2:0]     << SendData(client, b'\xe3\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdbD\x9f\x9fU\xfb\x8d\xb6>\xa7\xc4\x9a\xec;\x8d\xffG*B*l`5\x07\xc2\xd7d`\xf9\xa23f\x14f\xa4\x8a\xf6\x86WxB\x8f&=\xa6\x0c\x8c\x91\xe6\x84\x84\x96\xe5h\xdb\xe5\x94F\xda\x82\xbf\xe6\x0ep\x9…
[20:38:46.703][192.0.0.2:0]   << SendData(client, b'\xe3\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdbD\x9f\x9fU\xfb\x8d\xb6>\xa7\xc4\x9a\xec;\x8d\xffG*B*l`5\x07\xc2\xd7d`\xf9\xa23f\x14f\xa4\x8a\xf6\x86WxB\x8f&=\xa6\x0c\x8c\x91\xe6\x84\x84\x96\xe5h\xdb\xe5\x94F\xda\x82\xbf\xe6\x0ep\x9…
[20:38:46.703][192.0.0.2:0]       << SendData(client, b'\xec\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdbC\xa3~\xcb\xbb\xdb\xe1\xd0\x9d\x03\xf0\x89\xa7\xd9y\xd0\xe4_\xd2\x1d\xfa\x9f\xe4\xb7Z\xd1=\xdaZ\x8d\x05PL5\xabK\xa7\xbf+\x1b\xb1\'\xcf\xeb\xc4g\xban\r\x1a\xdbX\x8d>m7\x16\xdc\x9f0S\xa5\x8cr\x08\xcf\x0bs\x16\xd2\x03(\x1f\xe0\xbf\x11\x1a\xcbz\x87lj\x04_\xd8\xb9t\xe2\xa8P\xf5`\x9ds\xccD\xfa\xc3\xb4y\x9f\x9eL\xe0T\x042\xb3\xabc_An\xeb\xf2\xf5z\x05-Q\xa8\x8f\x90\x1e\x92\xb9\\\x92\x08|\xc7\xc7|\x05\x1a\xfdlY\x93\x08^\xf2\xa7\x8e\x00\x80"\xb0…
[20:38:46.703][192.0.0.2:0]     << SendData(client, b'\xec\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdbC\xa3~\xcb\xbb\xdb\xe1\xd0\x9d\x03\xf0\x89\xa7\xd9y\xd0\xe4_\xd2\x1d\xfa\x9f\xe4\xb7Z\xd1=\xdaZ\x8d\x05PL5\xabK\xa7\xbf+\x1b\xb1\'\xcf\xeb\xc4g\xban\r\x1a\xdbX\x8d>m7\x16\xdc\x9f0S\xa…
[20:38:46.703][192.0.0.2:0]   << SendData(client, b'\xec\x00\x00\x00\x01\x00\x08\x8a_O\xb8\xdfy\x8e\xdbC\xa3~\xcb\xbb\xdb\xe1\xd0\x9d\x03\xf0\x89\xa7\xd9y\xd0\xe4_\xd2\x1d\xfa\x9f\xe4\xb7Z\xd1=\xdaZ\x8d\x05PL5\xabK\xa7\xbf+\x1b\xb1\'\xcf\xeb\xc4g\xban\r\x1a\xdbX\x8d>m7\x16\xdc\x9f0S\xa…
[20:38:46.703][192.0.0.2:0]       << RequestWakeup({'delay': 0.19999999995343387})
[20:38:46.703][192.0.0.2:0]     << RequestWakeup({'delay': 0.19999999995343387})
[20:38:46.703][192.0.0.2:0]   << RequestWakeup({'delay': 0.19999999995343387})
[20:38:46.704][192.0.0.2:0]   >> DataReceived(client, b'\xc0\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00\x00D\x9e\xe8\xdc\xe3\x9fo\x12\xa0\x86\x97\xb8X\x07\x97\x0e\xf6\xa0t5\x9dk\xaf+5>\x80\x0cbWc:\xab0\x15\xd0\xbctxY?\x08u\x04NB\xb4\x03\xf0\x05C\xa3\xae#\xdf\xd9_\xf6:\xd3\x0ed\xb3\x13\xf6\xfb\x82\x11\xcfu\xc7\xe0\xda\xce\x03\'J\x96\xfd\xe3\x8b!\x0f\xd1\xb6\x85Xf\xac\xeaey\xe3B\xea\xc7\xfe\xd9\x9f\xa7\xb1"H\xbc\x10\xb3\xee\x92\x91T\xd1p2\x1fF\xa8\xdfl\x9c\xcc\xddb\x1a\\X6(<\x15QeFE\x8c\x88)r\x91|\xe5\x83\xe0\xf9a\xf4 Ly\xebi\x83!\x1a…
[20:38:46.705][192.0.0.2:0]     >> DataReceived(client, b'\xc0\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00\x00D\x9e\xe8\xdc\xe3\x9fo\x12\xa0\x86\x97\xb8X\x07\x97\x0e\xf6\xa0t5\x9dk\xaf+5>\x80\x0cbWc:\xab0\x15\xd0\xbctxY?\x08u\x04NB\xb4\x03\xf0\x05C\xa3\xae#\xdf\xd9_\xf6:\xd3\x0ed\xb3\…
[20:38:46.705][192.0.0.2:0]       >> DataReceived(client, b'\xc0\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00\x00D\x9e\xe8\xdc\xe3\x9fo\x12\xa0\x86\x97\xb8X\x07\x97\x0e\xf6\xa0t5\x9dk\xaf+5>\x80\x0cbWc:\xab0\x15\xd0\xbctxY?\x08u\x04NB\xb4\x03\xf0\x05C\xa3\xae#\xdf\xd9_\xf6:\xd3\x0ed\xb3\…
[20:38:46.705][192.0.0.2:0]       << RequestWakeup({'delay': 0.030461542075499892})
[20:38:46.705][192.0.0.2:0]     << RequestWakeup({'delay': 0.030461542075499892})
[20:38:46.705][192.0.0.2:0]   << RequestWakeup({'delay': 0.030461542075499892})
[20:38:46.706][192.0.0.2:0]   >> DataReceived(client, b'\xef\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00\x19\xa6\xc0\x00\xb6:\xd0h\x02\xba\x9b\xb4\x91\xae\xadO\xf5\xf9\xb9\xcc\x1f\xa0\x0f\xe9\x8d1')
[20:38:46.706][192.0.0.2:0]     >> DataReceived(client, b'\xef\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00\x19\xa6\xc0\x00\xb6:\xd0h\x02\xba\x9b\xb4\x91\xae\xadO\xf5\xf9\xb9\xcc\x1f\xa0\x0f\xe9\x8d1')
[20:38:46.706][192.0.0.2:0]       >> DataReceived(client, b'\xef\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00\x19\xa6\xc0\x00\xb6:\xd0h\x02\xba\x9b\xb4\x91\xae\xadO\xf5\xf9\xb9\xcc\x1f\xa0\x0f\xe9\x8d1')
[20:38:46.706][192.0.0.2:0]   >> DataReceived(client, b'\xec\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00@PD\x0b\xe4\xcc\xb7\xd91\x99d\xa9\xe0\xb8\xc4\x19\xb5\xf0Z#\x9b\xa8\x86i\x15\x80\x0b\xd8\x07NZ\x80j6\\\xd4V!f\x82\xeb\x9f+\xc4\x03\x1ae\xf7\xc2\x91\x13\x84\xc7\x86\xc6CK\x05v\x87\x1d.6\x9e\xf6\xe2\xc6\xbe\xf5\x92Z<\nR\x9c\xa4*\x9c\xc9\xe2\x0c\xb2')
[20:38:46.707][192.0.0.2:0]     >> DataReceived(client, b'\xec\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00@PD\x0b\xe4\xcc\xb7\xd91\x99d\xa9\xe0\xb8\xc4\x19\xb5\xf0Z#\x9b\xa8\x86i\x15\x80\x0b\xd8\x07NZ\x80j6\\\xd4V!f\x82\xeb\x9f+\xc4\x03\x1ae\xf7\xc2\x91\x13\x84\xc7\x86\xc6CK\x05v\x87\…
[20:38:46.707][192.0.0.2:0]       >> DataReceived(client, b'\xec\x00\x00\x00\x01\x08\x8a_O\xb8\xdfy\x8e\xdb\x00@PD\x0b\xe4\xcc\xb7\xd91\x99d\xa9\xe0\xb8\xc4\x19\xb5\xf0Z#\x9b\xa8\x86i\x15\x80\x0b\xd8\x07NZ\x80j6\\\xd4V!f\x82\xeb\x9f+\xc4\x03\x1ae\xf7\xc2\x91\x13\x84\xc7\x86\xc6CK\x05v\x87\…
[20:38:46.707][192.0.0.2:0]       [quic] tls established: Client(192.0.0.2:0, state=open, alpn=h3)
[20:38:46.707][192.0.0.2:0]       << TlsEstablishedClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_list': [], 'alpn': b'h3', 'alpn_offers': [b'h3'], 'cipher': 'AES_256_GCM_SHA384', 'tls_version': 'QUIC', 'sni': 'http3.is', 'timestamp_start': 1721846326.6884422, 'timestamp_tls_setup': 1721846326.7073338, 'proxy_mode': ProxyMode.parse('local:curl')}), context=C…
[20:38:46.707][192.0.0.2:0]     << TlsEstablishedClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_list':…
[20:38:46.707][192.0.0.2:0]   << TlsEstablishedClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_list':…
[20:38:46.708][192.0.0.2:0]   >> Reply(TlsEstablishedClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_list': [], 'alpn': b'h3', 'alpn_offers': [b'h3'], 'cipher': 'AES_256_GCM_SHA384', 'tls_version': 'QUIC', 'sni': 'http3.is', 'timestamp_start': 1721846326.6884422, 'timestamp_tls_setup': 1721846326.7073338, 'proxy_mode': ProxyMode.parse('local:curl')}), con…
[20:38:46.708][192.0.0.2:0]     >> Reply(TlsEstablishedClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_…
[20:38:46.708][192.0.0.2:0]       >> Reply(TlsEstablishedClientHook(data=QuicTlsData(conn=Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_…
[20:38:46.708][192.0.0.2:0]       << SendData(client, b'_\x10-\x12*\x8f\xcc\x88L\xf8\x80$8/\x01b\x072\x87k\x04)\xff\xd8K\xb6\x95\xa2$\x1b\xae\x1a+\xccb\xed\x8eJ\x1d\xe2\x08tV\xa3\x89\x16\xd3\xb7')
[20:38:46.708][192.0.0.2:0]     << SendData(client, b'_\x10-\x12*\x8f\xcc\x88L\xf8\x80$8/\x01b\x072\x87k\x04)\xff\xd8K\xb6\x95\xa2$\x1b\xae\x1a+\xccb\xed\x8eJ\x1d\xe2\x08tV\xa3\x89\x16\xd3\xb7')
[20:38:46.708][192.0.0.2:0]   << SendData(client, b'_\x10-\x12*\x8f\xcc\x88L\xf8\x80$8/\x01b\x072\x87k\x04)\xff\xd8K\xb6\x95\xa2$\x1b\xae\x1a+\xccb\xed\x8eJ\x1d\xe2\x08tV\xa3\x89\x16\xd3\xb7')
[20:38:46.709][192.0.0.2:0]         >> Start({})
[20:38:46.709][192.0.0.2:0]         << NextLayerHook(data=NextLayer:None)
[20:38:46.709][192.0.0.2:0]       << NextLayerHook(data=NextLayer:None)
[20:38:46.709][192.0.0.2:0]     << NextLayerHook(data=NextLayer:None)
[20:38:46.709][192.0.0.2:0]   << NextLayerHook(data=NextLayer:None)
[20:38:46.709][192.0.0.2:0]   >> Reply(NextLayerHook(data=NextLayer:UDPLayer(state: start)), None)
[20:38:46.709][192.0.0.2:0]     >> Reply(NextLayerHook(data=NextLayer:UDPLayer(state: start)), None)
[20:38:46.710][192.0.0.2:0]       >> Reply(NextLayerHook(data=NextLayer:UDPLayer(state: start)), None)
[20:38:46.710][192.0.0.2:0]         >> Reply(NextLayerHook(data=NextLayer:UDPLayer(state: start)), None)
[20:38:46.710][192.0.0.2:0]         [nextlayer] UDPLayer(state: start)
[20:38:46.710][192.0.0.2:0]         >> Start({})
[20:38:46.710][192.0.0.2:0]         << UdpStartHook(flow=<UDPFlow (0 messages)>)
[20:38:46.710][192.0.0.2:0]         << UdpStartHook(flow=<UDPFlow (0 messages)>)
[20:38:46.710][192.0.0.2:0]       << UdpStartHook(flow=<UDPFlow (0 messages)>)
[20:38:46.710][192.0.0.2:0]     << UdpStartHook(flow=<UDPFlow (0 messages)>)
[20:38:46.710][192.0.0.2:0]   << UdpStartHook(flow=<UDPFlow (0 messages)>)
[20:38:46.711][192.0.0.2:0]   >> Reply(UdpStartHook(flow=<UDPFlow (0 messages)>), None)
[20:38:46.711][192.0.0.2:0]     >> Reply(UdpStartHook(flow=<UDPFlow (0 messages)>), None)
[20:38:46.711][192.0.0.2:0]       >> Reply(UdpStartHook(flow=<UDPFlow (0 messages)>), None)
[20:38:46.711][192.0.0.2:0]         >> Reply(UdpStartHook(flow=<UDPFlow (0 messages)>), None)
[20:38:46.711][192.0.0.2:0]         << OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'transport_protocol': 'udp', 'tls': True})})
[20:38:46.711][192.0.0.2:0]       << OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'transport_protocol': 'udp', 'tls': True})})
[20:38:46.711][192.0.0.2:0]     << OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'transport_protocol': 'udp', 'tls': True})})
[20:38:46.711][192.0.0.2:0]   << OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'transport_protocol': 'udp', 'tls': True})})
[20:38:46.711][192.0.0.2:0]   >> DataReceived(client, b'X\x8a_O\xb8\xdfy\x8e\xdb\xd8\xfay?\x91\xf9d\xa6I\xc4\x81\x97\x98\xca3\xa3x\x93\xc0l\xfd\x0c\xb2\x91}`\xf85:\xf9F\x12\xc5\xd5H\x8cF\xb6')
[20:38:46.712][192.0.0.2:0]     >! DataReceived(client, b'X\x8a_O\xb8\xdfy\x8e\xdb\xd8\xfay?\x91\xf9d\xa6I\xc4\x81\x97\x98\xca3\xa3x\x93\xc0l\xfd\x0c\xb2\x91}`\xf85:\xf9F\x12\xc5\xd5H\x8cF\xb6')
[20:38:46.712][192.0.0.2:0] server connect 151.101.129.91:443
[20:38:46.712][192.0.0.2:0]   >> Reply(OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'timestamp_start': 1721846326.711458})}), None)
[20:38:46.712][192.0.0.2:0]     >> Reply(OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'timest…
[20:38:46.712][192.0.0.2:0]     << QuicStartServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'timestamp_start': 1721846326.711458}), context=Context(
      Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificat…
[20:38:46.712][192.0.0.2:0]   << QuicStartServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, '…
[20:38:46.713][192.0.0.2:0]   >> Reply(QuicStartServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'alpn_offers': (b'h3',), 'sni': 'http3.is', 'timestamp_start': 1721846326.711458}), context=Context(
    Client({'id': '…f60327', 'address': None, 'peername': ('192.0.0.2', 0), 'sockname': ('151.101.129.91', 443), 'state': <ConnectionState.OPEN: 3>, 'tr…
[20:38:46.713][192.0.0.2:0]     >> Reply(QuicStartServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': T…
[20:38:46.716][192.0.0.2:0]     << SendData(server, b'\xc7\x00\x00\x00\x01\x08\xf0\xc7[\x08y\xb0qp\x08xY:IA\x89\x86Y\x00D\x96\xe8b@\xf3{\x1c\xa4\xd1o\xdai7Rc\x12\xb0\x8br$\x17\xd1\xcd\xdb\xd0h\xac3B\xdb\x80\xcb\xc0\xf9\x83\xb78i\xb8\xf8I\xd6\xbcn\x14>\xbe\xe0\xc2~\x8b=T\xd8\x99\x0e\x93\x19\x85\x02\xdb\x95`\xd6\x9f\xda\xd8\xfcS\x9af.k`\x99S\xcf\x14\xb7\x00&\x19\x0e6\x1d\xd1\xf8r\x9c\x01`0\xd9\x132W\xb3m/\x9a\x9d\xc4\x98\x80\xec\x94\xbd(\x8d\xfb\xe3\xa7vrR\x1e\xa6\xd0\xbd\x8c]\x11\x11z\x85R\xcaD\xf2b3\xc0\x11\x8bD)D\xa1zs;W\xda\xfb\xa3\x06\…
[20:38:46.716][192.0.0.2:0]   << SendData(server, b'\xc7\x00\x00\x00\x01\x08\xf0\xc7[\x08y\xb0qp\x08xY:IA\x89\x86Y\x00D\x96\xe8b@\xf3{\x1c\xa4\xd1o\xdai7Rc\x12\xb0\x8br$\x17\xd1\xcd\xdb\xd0h\xac3B\xdb\x80\xcb\xc0\xf9\x83\xb78i\xb8\xf8I\xd6\xbcn\x14>\xbe\xe0\xc2~\x8b=T\xd8\x99\x0e\x93\x…
[20:38:46.716][192.0.0.2:0]     << RequestWakeup({'delay': 0.19999999995343387})
[20:38:46.716][192.0.0.2:0]   << RequestWakeup({'delay': 0.19999999995343387})
[20:38:46.716][192.0.0.2:0]     !> DataReceived(client, b'X\x8a_O\xb8\xdfy\x8e\xdb\xd8\xfay?\x91\xf9d\xa6I\xc4\x81\x97\x98\xca3\xa3x\x93\xc0l\xfd\x0c\xb2\x91}`\xf85:\xf9F\x12\xc5\xd5H\x8cF\xb6')
[20:38:46.716][192.0.0.2:0]       >> DataReceived(client, b'X\x8a_O\xb8\xdfy\x8e\xdb\xd8\xfay?\x91\xf9d\xa6I\xc4\x81\x97\x98\xca3\xa3x\x93\xc0l\xfd\x0c\xb2\x91}`\xf85:\xf9F\x12\xc5\xd5H\x8cF\xb6')
[20:38:46.716][192.0.0.2:0]         >! QuicStreamDataReceived(client on 2, b'\x00\x04\r\x06\xff\xff\xff\xff\xff\xff\xff\xff\x01\x00\x07\x00')
[20:38:46.716][192.0.0.2:0]       << RequestWakeup({'delay': 0.0009185411036014557})
[20:38:46.716][192.0.0.2:0]     << RequestWakeup({'delay': 0.0009185411036014557})
[20:38:46.716][192.0.0.2:0]   << RequestWakeup({'delay': 0.0009185411036014557})
[20:38:46.717][192.0.0.2:0]   >> DataReceived(client, b'H\x8a_O\xb8\xdfy\x8e\xdbXN\xb7O\xef"\xfe4_\x1f$\xfb\x0e:}\x13J\xec?\xd1\x97\xe7\x80')
[20:38:46.717][192.0.0.2:0]     >> DataReceived(client, b'H\x8a_O\xb8\xdfy\x8e\xdbXN\xb7O\xef"\xfe4_\x1f$\xfb\x0e:}\x13J\xec?\xd1\x97\xe7\x80')
[20:38:46.717][192.0.0.2:0]       >> DataReceived(client, b'H\x8a_O\xb8\xdfy\x8e\xdbXN\xb7O\xef"\xfe4_\x1f$\xfb\x0e:}\x13J\xec?\xd1\x97\xe7\x80')
[20:38:46.717][192.0.0.2:0]         >! QuicStreamDataReceived(client on 10, b'\x03')
[20:38:46.717][192.0.0.2:0]   >> Wakeup(command=RequestWakeup({'delay': 0.0009185411036014557}))
[20:38:46.717][192.0.0.2:0]     >> Wakeup(command=RequestWakeup({'delay': 0.0009185411036014557}))
[20:38:46.717][192.0.0.2:0]       >> Wakeup(command=RequestWakeup({'delay': 0.0009185411036014557}))
[20:38:46.718][192.0.0.2:0]       << SendData(client, b'Zh\xd2;\x0c\x83\xb4\xa5\xa9\xe0\xcc\xfb\x8fk\xfb\xa4\xf3\x0f\x99?\x8f\x80\xdb\xa4/')
[20:38:46.718][192.0.0.2:0]     << SendData(client, b'Zh\xd2;\x0c\x83\xb4\xa5\xa9\xe0\xcc\xfb\x8fk\xfb\xa4\xf3\x0f\x99?\x8f\x80\xdb\xa4/')
[20:38:46.718][192.0.0.2:0]   << SendData(client, b'Zh\xd2;\x0c\x83\xb4\xa5\xa9\xe0\xcc\xfb\x8fk\xfb\xa4\xf3\x0f\x99?\x8f\x80\xdb\xa4/')
[20:38:46.718][192.0.0.2:0]   >> DataReceived(client, b'E\x8a_O\xb8\xdfy\x8e\xdba\xd4e\xb2K\xde\xbf\x93\xf3\x99O\x07\x92h\x1c{\xb4\xf5\x90\x8c\x887\x1f')
[20:38:46.718][192.0.0.2:0]     >> DataReceived(client, b'E\x8a_O\xb8\xdfy\x8e\xdba\xd4e\xb2K\xde\xbf\x93\xf3\x99O\x07\x92h\x1c{\xb4\xf5\x90\x8c\x887\x1f')
[20:38:46.718][192.0.0.2:0]       >> DataReceived(client, b'E\x8a_O\xb8\xdfy\x8e\xdba\xd4e\xb2K\xde\xbf\x93\xf3\x99O\x07\x92h\x1c{\xb4\xf5\x90\x8c\x887\x1f')
[20:38:46.718][192.0.0.2:0]         >! QuicStreamDataReceived(client on 6, b'\x02')
[20:38:46.718][192.0.0.2:0]       << RequestWakeup({'delay': 0.0009088329970836639})
[20:38:46.718][192.0.0.2:0]     << RequestWakeup({'delay': 0.0009088329970836639})
[20:38:46.718][192.0.0.2:0]   << RequestWakeup({'delay': 0.0009088329970836639})
[20:38:46.719][192.0.0.2:0]   >> DataReceived(client, b"[\x8a_O\xb8\xdfy\x8e\xdb\xe3\x98\x0cFF\xe6\\\xf3'\x83\x0eAB\xd7\xc4u\xe1\x0e\xed\xe4%\xfd\x9eF\xe0\x1ds'\xc5\x83\x19G\xc0?\xa5\xd2\x1e\xe3\xe0\xc8\xbc?,\\x\xd82\x15\xe7\x89")
[20:38:46.719][192.0.0.2:0]     >> DataReceived(client, b"[\x8a_O\xb8\xdfy\x8e\xdb\xe3\x98\x0cFF\xe6\\\xf3'\x83\x0eAB\xd7\xc4u\xe1\x0e\xed\xe4%\xfd\x9eF\xe0\x1ds'\xc5\x83\x19G\xc0?\xa5\xd2\x1e\xe3\xe0\xc8\xbc?,\\x\xd82\x15\xe7\x89")
[20:38:46.719][192.0.0.2:0]       >> DataReceived(client, b"[\x8a_O\xb8\xdfy\x8e\xdb\xe3\x98\x0cFF\xe6\\\xf3'\x83\x0eAB\xd7\xc4u\xe1\x0e\xed\xe4%\xfd\x9eF\xe0\x1ds'\xc5\x83\x19G\xc0?\xa5\xd2\x1e\xe3\xe0\xc8\xbc?,\\x\xd82\x15\xe7\x89")
[20:38:46.719][192.0.0.2:0]         >! QuicStreamDataReceived(client on 0, [end_stream] b'\x01\x19\x00\x00\xd1\xd7P\x86\x9d)\xad\x95\xcc\x8f\xc1_P\x88%\xb6P\xc3\xcb\xbe\xb8?\xdd')
[20:38:46.719][192.0.0.2:0]       << SendData(client, b'U\x1b\x08\xa4\xe2\xdf\xc2\xb7[\x01\xa6\xe7\xc8\x12\xc1\xbd#\xb2\x8d(+\n\x14\xa7')
[20:38:46.719][192.0.0.2:0]     << SendData(client, b'U\x1b\x08\xa4\xe2\xdf\xc2\xb7[\x01\xa6\xe7\xc8\x12\xc1\xbd#\xb2\x8d(+\n\x14\xa7')
[20:38:46.719][192.0.0.2:0]   << SendData(client, b'U\x1b\x08\xa4\xe2\xdf\xc2\xb7[\x01\xa6\xe7\xc8\x12\xc1\xbd#\xb2\x8d(+\n\x14\xa7')
[20:38:46.720][192.0.0.2:0]   >> Wakeup(command=RequestWakeup({'delay': 0.0009088329970836639}))
[20:38:46.720][192.0.0.2:0]     >> Wakeup(command=RequestWakeup({'delay': 0.0009088329970836639}))
[20:38:46.720][192.0.0.2:0]       >> Wakeup(command=RequestWakeup({'delay': 0.0009088329970836639}))
[20:38:46.720][192.0.0.2:0]   >> DataReceived(client, b'O2p;]*j\xa0\xec\x1f\xe4\x8bP\xc5M\xc3_\xf0\xf7\xaf`U%o\xf1&BJ\xf6\x13\xf0\x96\x9e\x10')
[20:38:46.720][192.0.0.2:0]     >> DataReceived(client, b'O2p;]*j\xa0\xec\x1f\xe4\x8bP\xc5M\xc3_\xf0\xf7\xaf`U%o\xf1&BJ\xf6\x13\xf0\x96\x9e\x10')
[20:38:46.720][192.0.0.2:0]       >> DataReceived(client, b'O2p;]*j\xa0\xec\x1f\xe4\x8bP\xc5M\xc3_\xf0\xf7\xaf`U%o\xf1&BJ\xf6\x13\xf0\x96\x9e\x10')
[20:38:46.724][192.0.0.2:0]   >> DataReceived(server, b'\xc4\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x00@\x96\xdf\x8e\xb4\xf8:C\xac\x83T#\x10|\x13\xbc\xc5\xb4Z\xb5\x9d\xcd\x16\xf5\x1d\xd7\x9c-j-\xacU\x18\xd4\x8f\xfdXC|\n\x91\x0f\x10H<P*\xcb1p\xc6\xf6\xd2\x87\x8a_\xee\x02x\xf3\xae =\x9e\xf5\xef\x84\x17\xe9\xf8v\xa1?\xef\xa1\xf0vG\xf1J=\x971\xe5}A\x1b$\t\x7f\x15k\xa8\xbc\x01\xb6\xa7\x87l\x19\xa4\xe6n\xeb\xc9\xe8\xca\x97\xe0\nO\xa3\xfd\ttS\xe1\x82~~\xad\xa9~\t\x0c\x8c\x9c\xe2\xf8\xaf…
[20:38:46.724][192.0.0.2:0]     >> DataReceived(server, b'\xc4\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x00@\x96\xdf\x8e\xb4\xf8:C\xac\x83T#\x10|\x13\xbc\xc5\xb4Z\xb5\x9d\xcd\x16\xf5\x1d\xd7\x9c-j-\xacU\x18\xd4\x8f\xfdXC|\n\x91\x0f\…
[20:38:46.725][192.0.0.2:0]     << SendData(server, b'\xc6\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y\x00D\x8d$+Y\x95\x8a\x8aE\x11\x9e\xed\xbcAv]\xe1\xa7\x86n\xdbc1\x9b\xe9\x89\r\x08Z_Q!\x97\x916F*\xc0\x8c\xa9/l\xc3B\x85\x1c\xf8\x1e\xb3[\x80-\xff\xbb>pn\'\x12\xef\x81\xdfL*\xd2\xf6\xa6\x0e,|o\x85g\xa6\xab)\x91\xcbmV\xefE?\xdc\xb2Nt\x08+\xb5sj\x05Uap &\xea\xdb\x13X\xfd\xb1\x1dT\xe5\x80\xf1+\xe7\xebV\t\xcc\xee\nZ\xf8*\xb8\x96\xfbp+o\xca&\xb0P;\xa0\x88Q\x87p\x90h\xb7\xacD\xfa~\xa3R\xa5\x15…
[20:38:46.725][192.0.0.2:0]   << SendData(server, b'\xc6\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y\x00D\x8d$+Y\x95\x8a\x8aE\x11\x9e\xed\xbcAv]\xe1\xa7\x86n\xdbc1\x9b\xe9\x89\r\x08Z_Q!\x97\x916F*\xc0\x8c\xa9/l\xc3B\x85\x1c\xf8\x1e\x…
[20:38:46.725][192.0.0.2:0]     << SendData(server, b'\xea\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@\x18\xf1d\xcc2\xb5:\xbf\xd6ogb\xa4\x94\xe7\x82$\xa2s\xff\xe0\xdf\x85\x87Y')
[20:38:46.725][192.0.0.2:0]   << SendData(server, b'\xea\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@\x18\xf1d\xcc2\xb5:\xbf\xd6ogb\xa4\x94\xe7\x82$\xa2s\xff\xe0\xdf\x85\x87Y')
[20:38:46.725][192.0.0.2:0]     << RequestWakeup({'delay': 0.04200949880760163})
[20:38:46.725][192.0.0.2:0]   << RequestWakeup({'delay': 0.04200949880760163})
[20:38:46.726][192.0.0.2:0]   >> DataReceived(server, b'\xe8\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbeD\xde|Ch\xbdK\x19\xdf\x1e\xfe\x17\xbf\xee\xf3\xcazb\xbe\x03\xe8=\x13\xa46\xcfm\x9b\x94L(L\xe2]\x9b\x8a8{\xf8mN\x19\x905&\xc0My2M\x96\x8a\x90\x08\xd7\xbb!;\x9a\xbe\xda\xaa\xca\xcf\xef\x08\xf0\xc3\xf1\x85\xbb2\xc0n-\xe1\xbdi\x16\xe6\xa3\xa5\x84zIp#"\x87\'wa\xc0\x93\x16\xa9\xfc\xbb\x1e>\xafv\xea\x8c\xc0\x07\xfa^P]v2\xd7R\xf6\x02M\xf4\x97\x99\xe8$\xef\xaf\xee\xab\x83\xa77\xbe\xed\x1d\xd…
[20:38:46.726][192.0.0.2:0]     >> DataReceived(server, b'\xe8\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbeD\xde|Ch\xbdK\x19\xdf\x1e\xfe\x17\xbf\xee\xf3\xcazb\xbe\x03\xe8=\x13\xa46\xcfm\x9b\x94L(L\xe2]\x9b\x8a8{\xf8mN\x19\x905&\xc0My2M\…
[20:38:46.726][192.0.0.2:0]     << SendData(server, b'\xed\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@\x17^\xf9\xc0\x04QP\x11\xab!\xe2_\xe7C\x81\x9e\xa5N\xbb\xc07\xa9r\xd4')
[20:38:46.726][192.0.0.2:0]   << SendData(server, b'\xed\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@\x17^\xf9\xc0\x04QP\x11\xab!\xe2_\xe7C\x81\x9e\xa5N\xbb\xc07\xa9r\xd4')
[20:38:46.727][192.0.0.2:0]   >> DataReceived(server, b'\xe1\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbeB\xc3N\x19\xa2\xe2\x95\xc3\x9b\xc2\xb3\x81\x04(\x10\xcf\x93\x91|0\xa8\xd4J0f\xcd\xa2b\x97\x19\xa3n\xa3\x03\xe2\x0e\x9e\xd0(\xed\xa7\x02\x01\x80gq6\xe2\x96\xdd\xe9\x16\x8byz\x98\xe0@\xa9e\x19\xd2?\xb8O\x8a\x84\x8b\xa5\x1b+\xeb\x9d\xcf\xf3XQ\x1e\xd7\xdd\xc7\xaf\x8d)\xba\x01:z\xe8.\xf9\xf5b\xe1\xee\x91(}O0\x15\xaa\x00<\x08\xe9DR&\xf4\x15\xcd\x83\x0c\xa5m\x0e\xbf\x83\x9eN\x94\x9b\xbf\xe…
[20:38:46.727][192.0.0.2:0]     >> DataReceived(server, b'\xe1\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbeB\xc3N\x19\xa2\xe2\x95\xc3\x9b\xc2\xb3\x81\x04(\x10\xcf\x93\x91|0\xa8\xd4J0f\xcd\xa2b\x97\x19\xa3n\xa3\x03\xe2\x0e\x9e\xd0(\xed\x…
[20:38:46.727][192.0.0.2:0]     << SendData(server, b'\xef\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@\x17\xdfo\x80\x15/\x18\xdf\xd0{!\n\xe1W\xa9a\xc4Y\x14\xcf\x8da\xd0\x03')
[20:38:46.727][192.0.0.2:0]   << SendData(server, b'\xef\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@\x17\xdfo\x80\x15/\x18\xdf\xd0{!\n\xe1W\xa9a\xc4Y\x14\xcf\x8da\xd0\x03')
[20:38:46.727][192.0.0.2:0]   >> DataReceived(server, b'\xe6\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbeAS\x1a}\xc5#\xa6\xb7/N4\x14\x82\xc0|\x1bg\x84Y\xed\xf0\x88\xffr\x02\xe7\xb9=\xc5/\xdc\xe7\xcc\xce"(\xe6\\\xc3R\xb5-\xc1\x07\x86C\x0e\xb4\nK\x1e\x8e\x1c\xe6\xe5Q\xcf\x159\xf7Jb\x83\xb2/\xbd\xa6\xd5\xd6\x95[\x92\x8b\xbd\x85j\x8b\xc2V6\xd3\xca\xaeH\xd4</p[\xd0 Zjw\'\xd6?\'\x0c\xf14\xf5\xdch\xf4\xd5Z\x92\x9b\x03E\x86\xf6\t\x84\xcdzH8\x83\x00\xae\xd7(t\xf4-Ez\x127\xbba\xa7J\x9e\x15\x90Q\…
[20:38:46.727][192.0.0.2:0]     >> DataReceived(server, b'\xe6\x00\x00\x00\x01\x08xY:IA\x89\x86Y\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbeAS\x1a}\xc5#\xa6\xb7/N4\x14\x82\xc0|\x1bg\x84Y\xed\xf0\x88\xffr\x02\xe7\xb9=\xc5/\xdc\xe7\xcc\xce"(\xe6\\\xc3R\xb5-\xc1\x07\x86C\…
[20:38:46.739][192.0.0.2:0]     [quic] tls established: Server(151.101.129.91:443, state=open, alpn=h3, src_port=49738)
[20:38:46.739][192.0.0.2:0]     << TlsEstablishedServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_list': [<Cert(cn='http3.is', altnames=['http3.is'])>, <Cert(cn='GlobalSign Atlas R3 DV TLS CA 2024 Q2', altnames=[])>], 'alpn': b'h3', 'alpn_offers': (b'h3',), 'cipher': 'AES_256_GCM_SHA384', 'tls_version': 'QUIC', 'sni': 'http3.is', 'time…
[20:38:46.739][192.0.0.2:0]   << TlsEstablishedServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': Tr…
[20:38:46.740][192.0.0.2:0]   >> Reply(TlsEstablishedServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_list': [<Cert(cn='http3.is', altnames=['http3.is'])>, <Cert(cn='GlobalSign Atlas R3 DV TLS CA 2024 Q2', altnames=[])>], 'alpn': b'h3', 'alpn_offers': (b'h3',), 'cipher': 'AES_256_GCM_SHA384', 'tls_version': 'QUIC', 'sni': 'http3.is',…
[20:38:46.740][192.0.0.2:0]     >> Reply(TlsEstablishedServerHook(data=QuicTlsData(conn=Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tl…
[20:38:46.740][192.0.0.2:0]     << SendData(server, b'\xe2\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@P^\xf1\x9cc\xa6c\x8e\xee\x0b\xfdc\x82~<\x12\x10\x824\x0fS8\xc9\xb0o\xfe\xb0\xcf\xa2\xb2x\xff\xe1\xa5w\xb3\xb3\x97\x1aY\xcb\x13k\xd2\xcbW\xb5\x06\x03ds\x7f;\xda\x92\x05G\n\xa5\x11\xaa}4\xb7\xad1]\xfb\xdc\xaa\xfa\x85\xb3j\xaf\xbb\x14T\xea\x1c\x17j\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbeA\xbd\x94\xdd%\xe0\xcf\x99b\x93\xf8\xb1C\xab\xc5\x16>~Zs\xa9\xcc\xc3\xa0{\x02\xb3\x1…
[20:38:46.740][192.0.0.2:0]   << SendData(server, b'\xe2\x00\x00\x00\x01\x11\xdc\xfb\x05\xdf\xc2\x90\xfb\x1dO\x153\xfeY\xc4\xde\xfd\xbe\x08xY:IA\x89\x86Y@P^\xf1\x9cc\xa6c\x8e\xee\x0b\xfdc\x82~<\x12\x10\x824\x0fS8\xc9\xb0o\xfe\xb0\xcf\xa2\xb2x\xff\xe1\xa5w\xb3\xb3\x97\x1aY\xcb\x13k\xd2\…
[20:38:46.740][192.0.0.2:0]       >> Reply(OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certificate_list': [<Cert(cn='http3.is', altnames=['http3.is'])>, <Cert(cn='GlobalSign Atlas R3 DV TLS CA 2024 Q2', altnames=[])>], 'alpn': b'h3', 'alpn_offers': (b'h3',), 'cipher': 'AES_256_GCM_SHA384', 'tls_version': 'QUIC', 'sni': 'http3.is', 'timestamp_start…
[20:38:46.740][192.0.0.2:0]         >> Reply(OpenConnection({'connection': Server({'id': '…8a5b9c', 'address': ('151.101.129.91', 443), 'peername': ('151.101.129.91', 443), 'sockname': ('192.0.0.2', 49738), 'state': <ConnectionState.OPEN: 3>, 'transport_protocol': 'udp', 'tls': True, 'certif…
[20:38:46.740][192.0.0.2:0]         !> QuicStreamDataReceived(client on 2, b'\x00\x04\r\x06\xff\xff\xff\xff\xff\xff\xff\xff\x01\x00\x07\x00')
[20:38:46.740][192.0.0.2:0] mitmproxy has crashed!
Traceback (most recent call last):
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/server.py", line 391, in server_event
    for command in layer_commands:
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 181, in handle_event
    command = next(command_generator)
              ^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 270, in handle_event
    yield from self._handle(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 142, in handle_event
    yield from self.__continue(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 233, in __continue
    yield from self.__process(command_generator, event.reply)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 220, in __process
    command = next(command_generator)
              ^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layers/quic.py", line 816, in _handle_event
    yield from super()._handle_event(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/tunnel.py", line 81, in _handle_event
    yield from self._handshake_finished(err)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/tunnel.py", line 106, in _handshake_finished
    yield from self.event_to_child(
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layers/quic.py", line 1110, in event_to_child
    yield from super().event_to_child(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layers/quic.py", line 821, in event_to_child
    yield from super().event_to_child(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/tunnel.py", line 153, in event_to_child
    for command in self.child_layer.handle_event(event):
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 181, in handle_event
    command = next(command_generator)
              ^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layers/quic.py", line 816, in _handle_event
    yield from super()._handle_event(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/tunnel.py", line 98, in _handle_event
    yield from self.event_to_child(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layers/quic.py", line 821, in event_to_child
    yield from super().event_to_child(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/tunnel.py", line 153, in event_to_child
    for command in self.child_layer.handle_event(event):
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 142, in handle_event
    yield from self.__continue(event)
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/layer.py", line 239, in __continue
    command_generator = self._handle_event(ev)
                        ^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/mhils/git/mitmproxy/mitmproxy/proxy/utils.py", line 27, in _check_event_type
    raise AssertionError(
AssertionError: Unexpected event type at UDPLayer.relay_messages: Expected DataReceived|ConnectionClosed|UdpMessageInjected, got QuicStreamDataReceived(client on 2, b'\x00\x04\r\x06\xff\xff\xff\xff\xff\xff\xff\xff\x01\x00\x07\x00').

Edit: Added toggle

[errorxyz]

We now support cURL(through reverse proxy and local mode) on all platforms🎉

Reverse proxy on browsers:
Two issues that we need to tackle other than the existing bug:

• we need to decide how do we want the interface for starting HTTP3 look like. Currently we can run HTTP3 reverse proxy mode using: mitmdump --mode reverse:https://http3.is@443 --mode reverse:http3://http3.is@443. I'd propose that we combine the two options into a single reverse:http3:... mode since we need HTTP1/2 before switching to HTTP3 anyway (for browsers) and we could also keep it as a fallback in case HTTP3 does not work.
• Second is that browsers use the Alt-Svc header from the HTTP1/2 response to determine which port to connect to for HTTP3 so we can't just listen on any port. One probable solution is to have an addon modify the header to the port that we're listening on.

[mhils]

• Currently we can run HTTP3 reverse proxy mode using: mitmdump --mode reverse:https://http3.is@443 --mode reverse:http3://http3.is@443. I'd propose that we combine the two options into a single reverse:http3:... mode since we need HTTP1/2 before switching to HTTP3 anyway (for browsers) and we could also keep it as a fallback in case HTTP3 does not work.

I agree that we should combine them, but why don't we just extend the existing https:// scheme to also listen for UDP? :)

Second is that browsers use the Alt-Svc header from the HTTP1/2 response to determine which port to connect to for HTTP3 so we can't just listen on any port. One probable solution is to have an addon modify the header to the port that we're listening on.

Great catch! I agree that an addon for reverse proxy mode is the way to go. 👍

[errorxyz]

Troubleshooting Tips:

• Ensure that it is not a known bug such as HTTP3 reverse proxy: Handshake fails when accessing using IP via firefox #7111 (or any other issue filed in the bug tracker)

If you're using...

• Chrome:
  • Chrome based browsers don't trust self-signed certificates for HTTP/3 connections. Workaround is to force chrome trust our certificate using:
    .\chrome.exe --ignore-certificate-errors-spki-list="<cert fingerprint>" --origin-to-force-quic-on=<hostname>:<port>
    We can generate cert fingerprint using:
    openssl x509 -pubkey -noout -in <cert path> | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | base64
    Note that you must use the .p12 cert file for windows and .pem for linux.
  • Clear cache using the network tab
• Firefox:
  • Ensure you're not using VPN since firefox does not work reliably with VPN for HTTP/3 connections
  • Reload the website using ctrl+shift+R and then ctrl+R
• cURL:
  • Your cURL build may not support the --http3-only flag yet, but you can get the http3 build from https://github.com/stunnel/static-curl/releases
  • mitmproxy handles UDP connections on both IPv4/v6 if client tries to connect through both interfaces #7033

Why is my HTTP/3 reverse proxy not working?

• Ensure you've manually specified https:// in the URL if you're running the reverse proxy on a non-standard port.
• If you are trying to access the reverse-proxy using a browser, ensure that you're using reverse:https:... mode and not reverse:http3:... mode.

Why is HTTP/3 not working in transparent-based modes (local redirect mode, wireguard, transparent)?

• Chrome and other Chromium-based browsers do not trust user-added Certificate Authorities for QUIC (see above)
• Known bug: HTTP3 over local mode: Unable to access certain websites using firefox via HTTP3 #7117
• Ensure that you're not using VPN