Open sourcing h3i: a command line tool and library for low-level HTTP/3 testing and debugging
Dec 30, 2024Lucas Pardue, Evan Rittenhouse
Summary
This post introduces h3i, a new open-source command-line tool and Rust library for low-level HTTP/3 testing and debugging. It details the motivation behind its development, its role in ensuring standards-compliant software and production systems, and provides guidance on its usage. The post also includes a recap of QUIC and HTTP/3, and background on Cloudflare's existing testing methodologies for these protocols, highlighting the need for more accessible and maintainable tools like h3i to test edge cases and protocol deviations.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack