Unlocking QUIC’s proxying potential with MASQUE
Mar 20, 2022Lucas Pardue, Christopher Wood
Summary
This post introduces MASQUE (Multiplexing And Secure Communication over QUIC Encapsulation) as a protocol that leverages QUIC's DATAGRAM frames to enable UDP tunneling. It explains how MASQUE, built on extended CONNECT requests, allows for proxying non-TCP applications like HTTP/3, addressing the limitations of TCP-based proxying and extending Cloudflare Tunnel's capabilities to handle a wider range of protocols and improve privacy through nested tunneling.
More from the Internal Service Exposure & Management with Spectrum trail
- Route public traffic to private applications with Cloudflare
- Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh
- How Automatic Return Routing solves IP overlap
- A QUICker SASE client: re-building Proxy Mode
- How Workers VPC Services connects to your regional private networks from anywhere in the world