Getting Cloudflare Tunnels to connect to the Cloudflare Network with QUIC
Oct 20, 2021Sudarsan Reddy
Summary
This post details the successful integration of QUIC (UDP-based) into Cloudflare Tunnel, addressing performance limitations and Head-of-Line blocking inherent in the previous TCP/HTTP/2 approach. It highlights a critical debugging process involving UDP's connectionless nature and Linux kernel's source IP selection heuristics, culminating in the implementation of explicit source address control using `sendmsg` and `recvmsg` system calls to ensure reliable connectivity.
More from the Internal Service Exposure & Management with Spectrum trail
- Route public traffic to private applications with Cloudflare
- Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh
- A QUICker SASE client: re-building Proxy Mode
- How Automatic Return Routing solves IP overlap
- How Workers VPC Services connects to your regional private networks from anywhere in the world