Re: Proposal: a new WRAP UP capsule

Ben Schwartz <bemasc@meta.com> Sat, 06 July 2024 00:04 UTC

Resent-Date: Sat, 06 Jul 2024 00:03:53 +0000
Resent-Message-Id: <E1sPsu9-005VCw-2y@mab.w3.org>
Received-SPF: pass (pan.w3.org: domain of meta.com designates 67.231.145.42 as permitted sender) client-ip=67.231.145.42; envelope-from=prvs=2917eb931c=bemasc@meta.com; helo=mx0a-00082601.pphosted.com;
From: Ben Schwartz <bemasc@meta.com>
To: David Schinazi <dschinazi.ietf@gmail.com>, HTTP Working Group <ietf-http-wg@w3.org>
Thread-Topic: Proposal: a new WRAP UP capsule
Thread-Index: AQHazysuucqou3ybt0aCTuDQql0chbHoz4JB
Date: Sat, 06 Jul 2024 00:03:41 +0000
Message-ID: <SA1PR15MB4370BBF870827575AA1C05A8B3DF2@SA1PR15MB4370.namprd15.prod.outlook.com>
References: <CAPDSy+5UU=GSFWTdrkHW7RXNL8pr5KWtLfp8zjExsZvvGczfEw@mail.gmail.com>
In-Reply-To: <CAPDSy+5UU=GSFWTdrkHW7RXNL8pr5KWtLfp8zjExsZvvGczfEw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SA1PR15MB4370:EE_|CH3PR15MB5539:EE_
x-ms-office365-filtering-correlation-id: 83e04400-8ce4-4af7-8080-08dc9d4f180d
x-fb-source: Internal
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|38070700018|3613699012;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SA1PR15MB4370.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(38070700018)(3613699012);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_SA1PR15MB4370BBF870827575AA1C05A8B3DF2SA1PR15MB4370namp_"
X-OriginatorOrg: meta.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR15MB4370.namprd15.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 83e04400-8ce4-4af7-8080-08dc9d4f180d
X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jul 2024 00:03:41.0871 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 8ae927fe-1255-47a7-a2af-5f3a069daaa2
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 7WXRAfHh2laLPpkHxEjX42JBY6WVDGbQtULv/hkPfZUm9CfXcc6WtZHa/YthgeD8
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR15MB5539
X-Proofpoint-GUID: BnDXBzBGmITZ31xftKclINOaWTfpkER5
X-Proofpoint-ORIG-GUID: BnDXBzBGmITZ31xftKclINOaWTfpkER5
X-Proofpoint-UnRewURL: 4 URL's were un-rewritten
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.680,FMLib:17.12.28.16 definitions=2024-07-05_17,2024-07-05_01,2024-05-17_01
X-W3C-Hub-DKIM-Status: validation passed: (address=prvs=2917eb931c=bemasc@meta.com domain=meta.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-4.1
X-W3C-Hub-Spam-Report: ARC_SIGNED=0.001, ARC_VALID=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, W3C_AA=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1sPsu6-005OAt-1S ddf15ba59ecca85aa21c7956c9ea6f4b
X-Original-To: ietf-http-wg@w3.org
Subject: Re: Proposal: a new WRAP UP capsule
Archived-At: <https://www.w3.org/mid/SA1PR15MB4370BBF870827575AA1C05A8B3DF2@SA1PR15MB4370.namprd15.prod.outlook.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52051
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

I think this is a reasonable idea.  Two questions come to mind:

1. Should this have a signal?  Right now there's no indication from the client about whether it supports this frame.  That makes it difficult for the server to understand whether the frame is working as intended.  Did I not give a long enough grace period, or are these clients running long because they don't recognize the capsule?

2. Should this be a stream-scoped HTTP/2+3 frame type?  There are lots of cases of streaming requests and responses that might encounter some kind of limit in HTTP, including WebSocket, WebTransport, and even plain old POST and GET.  Should "this stream is getting too long for me" be a built-in function of HTTP?

--Ben
________________________________
From: David Schinazi <dschinazi.ietf@gmail.com>
Sent: Friday, July 5, 2024 6:29 PM
To: HTTP Working Group <ietf-http-wg@w3.org>
Subject: Proposal: a new WRAP UP capsule

Hi HTTP enthusiasts, Over in MASQUE land, as we're deploying our two-hop proxies, we decided we needed to put a cap on how many bytes we'd allow per token-authenticated connect-udp tunnel. Enforcing a hard limit is easy, but the issue
ZjQcmQRYFpfptBannerStart
This Message Is From an External Sender

ZjQcmQRYFpfptBannerEnd
Hi HTTP enthusiasts,

Over in MASQUE land, as we're deploying our two-hop proxies, we decided we needed to put a cap on how many bytes we'd allow per token-authenticated connect-udp tunnel. Enforcing a hard limit is easy, but the issue is that if the proxy aborts the tunnel halfway through, the web browser could be halfway through a proxied request. Since the browser doesn't know if the half-finished request was acted on or not, it can't retry it, so it has to surface the error to the user. Instead, we want the proxy to be able to warn the browser that this will happen soon, so that the browser can establish a new tunnel with a new token, and start sending new requests there. Conceptually this is a little like GOAWAY, but instead of "please wrap up this connection", it's "please wrap up this tunnel stream". It uses capsules, since this is a message from proxy to client. Here's a draft with diagrams:

https://datatracker.ietf.org/doc/draft-schinazi-httpbis-wrap-up/<https://datatracker.ietf.org/doc/draft-schinazi-httpbis-wrap-up/>
https://davidschinazi.github.io/draft-schinazi-httpbis-wrap-up/draft-schinazi-httpbis-wrap-up.html<https://davidschinazi.github.io/draft-schinazi-httpbis-wrap-up/draft-schinazi-httpbis-wrap-up.html>

I'd love to hear your thoughts.

Thanks,
David

Proposal: a new WRAP UP capsule David Schinazi
Re: Proposal: a new WRAP UP capsule Martin Thomson
Re: Proposal: a new WRAP UP capsule Ben Schwartz
Re: Proposal: a new WRAP UP capsule Valentin Gosu
Re: Proposal: a new WRAP UP capsule Lucas Pardue
Re: Proposal: a new WRAP UP capsule David Schinazi
Re: Proposal: a new WRAP UP capsule Dustin Mitchell
Re: Proposal: a new WRAP UP capsule Ben Schwartz
Re: Proposal: a new WRAP UP capsule Lucas Pardue
Re: Proposal: a new WRAP UP capsule David Schinazi
Re: Proposal: a new WRAP UP capsule Tommy Pauly
Re: Proposal: a new WRAP UP capsule David Schinazi