Slow connection clean up after ed25519
handshake failure
#11
Labels
development
Standard development
r&d:polykey:core activity 4
End to End Networking behind Consumer NAT Devices
Specification
There is an odd delay when cleaning up the
QUICConnection
after a tls handshake error. After the client checks the server's certs and fails it, it sends theCC
frame to close the connection. for aRSA
cert the server enters draining and then the close state very quickly. But for aed25519
cert the server processes theCC
frame, waits an odd 3-ish seconds using thetimeout()
,onTimeout()
timing mechanism and then enters the close state.I don't see a reason why this would behave differently for an
ed25519
cert compared to anRSA
one. I've been over the internal logic and I think I'm handling all the events when and as intended. This 3 second delay is clearly being set after processing theCC
frame withrecv()
on the server side AND doing processing asend()
. This is also after both sides have entered the draining state, so no new packets are going to be sent between them.Unless this is intended behaviour for handshakes with
ed25519
certs, I can only assume this is some kind of bug. I've posed an upstream issue for this at cloudflare/quiche#1488.Additional context
Tasks
The text was updated successfully, but these errors were encountered: