1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

# 国内可用 git clone https://github.com/google/boringssl.git
git clone https://boringssl.googlesource.com/boringssl
cd boringssl

# 切换到特殊版本
git checkout a2278d4d2cabe73f6663e3299ea7808edfa306b9

# 编译 
cmake . &&  make

# 记录当前位置
BORINGSSL=$PWD

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

# 注意：测试程序由 libevent 驱动，测试程序需要先装 libevent-dev
sudo apt-get install libevent-dev

git clone https://github.com/litespeedtech/lsquic.git
cd lsquic
git submodule init
git submodule update

# Statically:
# $BORINGSSL is the top-level BoringSSL directory from the previous step
cmake -DBORINGSSL_DIR=$BORINGSSL .
make

# As a dynamic library:
cmake -DLSQUIC_SHARED_LIB=1 -DBORINGSSL_DIR=$BORINGSSL .
make

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

./http_client -help 
Usage: http_client [opts]

Options:
   -p PATH     Path to request.  May be specified more than once.  If no
                 path is specified, the connection is closed as soon as
                 handshake succeeds.
   -n CONNS    Number of concurrent connections.  Defaults to 1.
   -r NREQS    Total number of requests to send.  Defaults to 1.
   -R MAXREQS  Maximum number of requests per single connection.  Some
                 connections will have fewer requests than this.
   -w CONCUR   Number of concurrent requests per single connection.
                 Defaults to 1.
   -M METHOD   Method.  Defaults to GET.
   -P PAYLOAD  Name of the file that contains payload to be used in the
                 request.  This adds two more headers to the request:
                 content-type: application/octet-stream and
                 content-length
   -K          Discard server response
   -I          Abort on incomplete reponse from server
   -4          Prefer IPv4 when resolving hostname
   -6          Prefer IPv6 when resolving hostname
   -C DIR      Certificate store.  If specified, server certificate will
                 be verified.
   -a          Display server certificate chain after successful handshake.
   -b N_BYTES  Send RESET_STREAM frame after the client has read n bytes.
   -t          Print stats to stdout.
   -T FILE     Print stats to FILE.  If FILE is -, print stats to stdout.
   -q FILE     QIF mode: issue requests from the QIF file and validate
                 server responses.
   -e TOKEN    Hexadecimal string representing resume token.
   -3 MAX      Close stream after reading at most MAX bytes.  The actual
                 number of bytes read is randominzed.
   -9 SPEC     Priority specification.  May be specified several times.
                 SPEC takes the form stream_id:nread:UI, where U is
                 urgency and I is incremental.  Matched \d+:\d+:[0-7][01]
   -7 DIR      Save fetched resources into this directory.
   -Q ALPN     Use hq ALPN.  Specify, for example, "h3-29".
   -0 FILE     Provide session resumption file (reading or writing)
   -s SVCPORT  Service port.  Takes on the form of host:port, host,
                 or port.  If host is not an IPv4 or IPv6 address, it is
                 resolved.  If host is not set, the value of SNI is
                 used (see the -H flag).  If port is not set, the default
                 is 443.
                 Examples:
                     127.0.0.1:12345
                     ::1:443
                     example.com
                     example.com:8443
                     8443
                 If no -s option is given, 0.0.0.0:12345 address
                 is used.
   -D          Do not set 'do not fragment' flag on outgoing UDP packets
   -z BYTES    Maximum size of outgoing UDP packets (client only).
                 Overrides -o base_plpmtu.
   -L LEVEL    Log level for all modules.  Possible values are `debug',
                 `info', `notice', `warn', `error', `alert', `emerg',
                 and `crit'.
   -l LEVELS   Log levels for modules, e.g.
                 -l event=info,engine=debug
               Can be specified more than once.
   -m MAX      Maximum number of outgoing packet buffers that can be
                 assigned at any one time.  By default, there is no max.
   -y style    Timestamp style used in log messages.  The following styles
                 are supported:
                   0   No timestamp
                   1   Millisecond time (this is the default).
                         Example: 11:04:05.196
                   2   Full date and millisecond time.
                         Example: 2017-03-21 13:43:46.671
                   3   Chrome-like timestamp: date/time.microseconds.
                         Example: 1223/104613.946956
                   4   Microsecond time.
                         Example: 11:04:05.196308
                   5   Full date and microsecond time.
                         Example: 2017-03-21 13:43:46.671345
   -S opt=val  Socket options.  Supported options:
                   sndbuf=12345    # Sets SO_SNDBUF
                   rcvbuf=12345    # Sets SO_RCVBUF
   -W          Use stock PMI (malloc & free)
   -g          Use sendmmsg() to send packets.
   -j          Use recvmmsg() to receive packets.
   -H host     Value of `host' HTTP header.  This is also used as SNI
                 in Client Hello.  This option is used to override the
                 `host' part of the address specified using -s flag.
   -G dir      SSL keys will be logged to files in this directory.
   -k          Connect UDP socket.  Only meant to be used with clients
                 to pick up ICMP errors.
   -i USECS    Clock granularity in microseconds.  Defaults to 1000.
   -h          Print this help screen and exit

1
2
3

# 不指定版本。默认是使用 Version 1 版本 
$ http_client -H www.litespeedtech.com:443 -p /  -G . -o version=h3-29

1
2
3
4
5

UDP Header
Packet Header     -----
QUIC Frame Header    --  TLS1.3
HTTP3 Frame Header   --   
HTTP Message      -----

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

 0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|S|Typ|  Next   |              Magic "uic"/"UIC"                |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                                                               |
+                         Connection ID                         +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                            Version                            |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                         Packet Number                         |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                       [Header Extensions]                   ...
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                           Payload                           ...
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

1
2
3
4
5
6
7
8
9

0                   1                   2                   3
 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|S|K|                Packet Number (30)                         |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|                                                               |
+                         Connection ID                         +
|                                                               |
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

+-----------------------+-----------------------------+------------+
| Type-field value      |     Control Frame-type      |    Spec    |
+-----------------------+-----------------------------+------------+
| 00000000B (0x00)      |  PADDING                    |     NP     |
| 00000001B (0x01)      |  PING                       |            |
| 00000010B (0x02-0x03) |  ACK                        |     NC     |
| 00000100B (0x04)      |  RESET_STREAM               |            |
| 00000101B (0x05)      |  STOP_SENDING               |            |
| 00000110B (0x06)      |  CRYPTO                     |            |
| 00000111B (0x07)      |  NEW_TOKEN                  |            |
| 00001000B (0x08-0x0F) |  STREAM                     |     F      |
| 00010000B (0x10)      |  MAX_DATA                   |            |
| 00010001B (0x11)      |  MAX_STREAM_DATA            |            |
| 00001100B (0x12-0x13) |  MAX_STREAMS                |            |
| 00001110B (0x14)      |  DATA_BLOCKED               |            |
| 00001111B (0x15)      |  STREAM_DATA_BLOCKED        |            |
| 00010000B (0x16-0x17) |  STREAMS_BLOCKED            |            |
| 00010010B (0x18)      |  NEW_CONNECTION_ID	      |     P      |
| 00010011B (0x19)      |  RETIRE_CONNECTION_ID       |            |
| 00010100B (0x1a)      |  PATH_CHALLENGE             |     P      |
| 00010101B (0x1b)      |  PATH_RESPONSE              |     P      |
| 00010110B (0x1c-0x1d) |  CONNECTION_CLOSE           |     N      |
| 00011000B (0x1e)      |  HANDSHAKE_DONE             |            |
+-----------------------+-----------------------------+------------+

1
2
3
4
5

Bits	Stream Type
0x00	Client-Initiated, Bidirectional
0x01	Server-Initiated, Bidirectional
0x02	Client-Initiated, Unidirectional
0x03	Server-Initiated, Unidirectional

1
2
3
4
5
6
7
8
9

Frame         Control Stream	Request Stream	Push Stream	
DATA          No                Yes               Yes	
HEADERS       No                Yes               Yes	
CANCEL_PUSH   Yes               No                No	
SETTINGS      Yes              (1)                No	
PUSH_PROMISE  No                Yes               No	
GOAWAY        Yes               No                No	
MAX_PUSH_ID   Yes               No                No	
Reserved      Yes               Yes               Yes	

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

// WriteField encodes f into a single Write to e's underlying Writer.
// This function may also produce bytes for the Header Block Prefix
// if necessary. If produced, it is done before encoding f.
func (e *Encoder) WriteField(f HeaderField) error {
	// write the Header Block Prefix
	if !e.wrotePrefix {
		e.buf = appendVarInt(e.buf, 8, 0)
		e.buf = appendVarInt(e.buf, 7, 0)
		e.wrotePrefix = true
	}

	idxAndVals, nameFound := encoderMap[f.Name]
	if nameFound {
		if idxAndVals.values == nil {
			if len(f.Value) == 0 {
				e.writeIndexedField(idxAndVals.idx)
			} else {
				e.writeLiteralFieldWithNameReference(&f, idxAndVals.idx)
			}
		} else {
			valIdx, valueFound := idxAndVals.values[f.Value]
			if valueFound {
				e.writeIndexedField(valIdx)
			} else {
				e.writeLiteralFieldWithNameReference(&f, idxAndVals.idx)
			}
		}
	} else {
		e.writeLiteralFieldWithoutNameReference(f)
	}

	e.w.Write(e.buf)
	e.buf = e.buf[:0]
	return nil
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

Client                                                  Server

Initial[0]: CRYPTO[CH] ->

                                 Initial[0]: CRYPTO[SH] ACK[0]
                       Handshake[0]: CRYPTO[EE, CERT, CV, FIN]
                                 <- 1-RTT[0]: STREAM[1, "..."]

Initial[1]: ACK[0]
Handshake[0]: CRYPTO[FIN], ACK[0]
1-RTT[0]: STREAM[0, "..."], ACK[0] ->

                                          Handshake[1]: ACK[0]
         <- 1-RTT[1]: HANDSHAKE_DONE, STREAM[3, "..."], ACK[0]

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

Client                                                  Server

Initial[0]: CRYPTO[CH]
0-RTT[0]: STREAM[0, "..."] ->

                                 Initial[0]: CRYPTO[SH] ACK[0]
                                  Handshake[0] CRYPTO[EE, FIN]
                          <- 1-RTT[0]: STREAM[1, "..."] ACK[0]

Initial[1]: ACK[0]
Handshake[0]: CRYPTO[FIN], ACK[0]
1-RTT[1]: STREAM[0, "..."] ACK[0] ->

                                          Handshake[1]: ACK[0]
         <- 1-RTT[1]: HANDSHAKE_DONE, STREAM[3, "..."], ACK[1]

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

Client                                                  Server

Initial[0]: CRYPTO[CH] ->

                                                <- Retry+Token

Initial+Token[1]: CRYPTO[CH] ->

                                 Initial[0]: CRYPTO[SH] ACK[1]
                       Handshake[0]: CRYPTO[EE, CERT, CV, FIN]
                                 <- 1-RTT[0]: STREAM[1, "..."]