Count server-sent RST_STREAM STREAM_CLOSED as suspect streams towards the HTTP/2 connection close threshold.

This CL considers scenarios in which the GFE needs to send RST_STREAM
STREAM_CLOSED as suspicious, as these scenarios imply the client is sending
HEADERS or DATA on a stream after half-closing that stream. As discussed in
cl/568690849, these scenarios can count toward the existing threshold for
connection close (used for client-sent premature RST_STREAMs) because the GFE
will not be forwarding these frames to the backend.

This CL also performs a minor fix to consider the receipt of HEADERS on a
half-closed remote stream to be suspect (via newly closing with RST_STREAM
STREAM_CLOSED) even if that HEADERS does not have the END_STREAM flag set.

Tested:
  blaze test //gfe/gfe2/http2/e2e:end_to_end_test_http2 --test_filter=*DataFrameAfterHalfClosedRemote* --runs_per_test=2000
  http://sponge2/1f334d43-ce60-4531-b7b4-aea62075e6c3

Protected by FLAGS_gfe2_reloadable_flag_http2_record_suspect_rst_stream_closed and pre-existing --gfe2_reloadable_flag_http2_send_goaway_for_premature_rst_streams.

PiperOrigin-RevId: 568909684
3 files changed
tree: d2b649a1594edb04a38b49ee67eec3626bd97882
  1. build/
  2. depstool/
  3. quiche/
  4. .bazelrc
  5. BUILD.bazel
  6. CONTRIBUTING.md
  7. LICENSE
  8. README.md
  9. WHITESPACE
  10. WORKSPACE.bazel
README.md

QUICHE

QUICHE stands for QUIC, Http, Etc. It is Google‘s production-ready implementation of QUIC, HTTP/2, HTTP/3, and related protocols and tools. It powers Google’s servers, Chromium, Envoy, and other projects. It is actively developed and maintained.

There are two public QUICHE repositories. Either one may be used by embedders, as they are automatically kept in sync:

To embed QUICHE in your project, platform APIs need to be implemented and build files need to be created. Note that it is on the QUICHE team's roadmap to include default implementation for all platform APIs and to open-source build files. In the meanwhile, take a look at open source embedders like Chromium and Envoy to get started:

To contribute to QUICHE, follow instructions at CONTRIBUTING.md.

QUICHE is only supported on little-endian platforms.