QUIC does not respond

K

konnykonny

New Member
#1
#1
Hello together,
i am trying to set up a server and get stuck enableling QUIC. I have successfully installed the certificates (https and HTTP/2 are working fine). Furthermore, QUIC is enabled on all levels (server, listener and virtual host). The UDP port for QUIC is open, but when any client tries to connect no reply are send by the server. I have tried multiple clients (lsquic-client, quic-go, googles client and chrome) and use the supported Version 43 of QUIC. I also installed different versions of lightspeed on at least 2 different machines always encountering the same issues.

In the attached error.txt file are some errors related to QUIC, but these dont mean anything to me. The screenshot is an exemplary dump of what the quic-go client sends out.

Thanks for your help in advance
 

Attachments

Last edited:
P

Pong

Administrator
Staff member
#2
#2
We checked your error log and we think it was a firewall problem.
log only show received packets for a dead connection.
You may need to check packet in/out at both sides with TCP dump.
 
K

konnykonny

New Member
#3
#3
Thank your for the fast response so far.
Im am pretty sure that the issue is not caused by a firewall. On my private local computer there is no firewall installed at all. Why are my connection requests already marked as "dead", if not a single packet was send out by the server?
 
P

Pong

Administrator
Staff member
#5
#5
also you mentioned "my private local computer"? QUIC need HTTPS with trusted certificate. You may need a cloud test server online with real CA certificate(not self-signed certificate)
 
Last edited:
K

konnykonny

New Member
#6
#6
  • Regarding the firewall (on my server) I can open a udp port with nc and connect from the outside and get data through in both directions
  • Regarding the certificates the installation on my real server has a valid lets encrypt certificate.
    • The LiteSpeed server has https working without any certificate issues in chrome.
    • Also the server provides QUIC in the header to the browser alt-svc: quic=":8888"; ma=2592000; v="35,39,43"
Are there ways to check if everything is fine with the certificate? And does it matter, that I do not use port 443?

Code: 
 []$ sudo netstat -lupn | grep 8888
udp        0      0 [MY IP]:8888      0.0.0.0:*                           13249/litespeed (ls
 
K

konnykonny

New Member
#7
#7
In this test case I try to trigger a version negotation, which is visible below in the log. However, the packet is never generated and I don't see anything on the network.
Code: 
2018-10-10 16:54:43.391456 [DEBUG] [UDP:*.*.*.*:8888] onRead: read 1 packet
2018-10-10 16:54:43.391461 [DEBUG] [UDP:*.*.*.*:8888] processPacketsInBatch: 1 unique cid
2018-10-10 16:53:52.359200 [DEBUG] [QuicShm::cleanupOldShmData]: PID 17790 is alive
2018-10-10 16:53:52.359202 [DEBUG] [QuicShm::cleanupOldShmData]: PID 17791 is alive
2018-10-10 16:53:52.359213 [DEBUG] [QuicShm::lookupCidPid]: insert CID: 5138124825545491283, PID: 17791
2018-10-10 16:53:52.359216 [DEBUG] [UDP:*.*.*.*:8888] processPacketsInBatch: 1 unique pid
2018-10-10 16:53:52.359224 [DEBUG] saved cid 5138124825545491283 -> 0x1228ed0
2018-10-10 16:53:52.359267 [DEBUG] engine: grew heaps to 4 elements
2018-10-10 16:53:52.359315 [DEBUG] engine: client-supplied version tag 0x31303051 is not recognized
2018-10-10 16:53:52.359330 [DEBUG] engine: scheduled version negotiation packet for cid 5138124825545491283
2018-10-10 16:53:52.359335 [DEBUG] [UDP:*.*.*.*:8888] processPacketsInBatch: clean up bad CID 5138124825545491283
 
Last edited by a moderator:
You must log in or register to reply here.
Top