Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tengine是否支持QUIC以及是否支持在QUIC中使用国密套件? #1907

Open
foxriver1025 opened this issue Jan 10, 2024 · 4 comments
Assignees

Comments

@foxriver1025
Copy link
Contributor

Question

Tengine是否支持QUIC以及是否支持在QUIC中使用国密套件?

@chobits
Copy link
Member

chobits commented Jan 11, 2024

@foxriver1025
Copy link
Contributor Author

@chobits 好的,非常感谢,再问一下,tengine使用xquic的话是否还支持异步ssl呢,比如之前的ssl_async配置?

@lianglli
Copy link
Member

  1. tengine当前版本默认H3是通过babassl (tongsuo) 加解密,babassl支持国密。
    https://github.com/alibaba/tengine/blob/master/modules/ngx_http_xquic_module/README.md

  2. 逻辑上H1~H3都是支持异步SSL的,如果有问题,可以再提单哈。

@foxriver1025
Copy link
Contributor Author

@lianglli 感谢答复,我理解的tengine支持quic是通过xquic实现的吧,就是软件栈是tengine+xquic+tongsuo。我的疑问其实有两个,一个是从整个软件栈上来看似乎无法支持国密,因为xquic不支持国密,所以tengine是否就无法支持国密的quic?第二个是tengine在quic中能否支持异步?因为tengine就一个线程,如果把加解密操作卸载到硬件,如果不支持异步的话,tengine需要等待硬件返回结果才能继续处理下一个请求,这样的话性能会很慢。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants