Ilya Shipitsin

LibreSSL server/log.txt ``` Note: setting global.maxconn to 503. Available polling systems : epoll : pref=300, test result OK poll : pref=200, test result OK select : pref=150, test result OK...

QuicTLS handshake/output.txt ``` 2024-01-19 00:11:12,511 Generated random file: cddwslfnxx of size: 1024 2024-01-19 00:11:12,512 Requests: https://server4:443/cddwslfnxx 2024-01-19 00:11:12,792 2024-01-19 00:11:12,793 Command: WAITFORSERVER=server:443 CERTS=/tmp/certs__no6gkh8/ TESTCASE_SERVER=handshake TESTCASE_CLIENT=handshake WWW=/tmp/www_2xlelmpx/ DOWNLOADS=/tmp/download_bo31pp4w/ SERVER_LOGS=/tmp/logs_server_y3xcdj_o CLIENT_LOGS=/tmp/logs_client_6wxrsd1d SCENARIO="simple-p2p...

LibreSSL handshake/output.txt ``` 2024-01-18 19:07:26,421 Generated random file: fthddprbkp of size: 1024 2024-01-18 19:07:26,422 Requests: https://server4:443/fthddprbkp 2024-01-18 19:07:26,612 2024-01-18 19:07:26,612 Command: WAITFORSERVER=server:443 CERTS=/tmp/certs_c3zs1_mk/ TESTCASE_SERVER=handshake TESTCASE_CLIENT=handshake WWW=/tmp/www_f21si0zj/ DOWNLOADS=/tmp/download_7zuv0d_k/ SERVER_LOGS=/tmp/logs_server_f0_46o0j CLIENT_LOGS=/tmp/logs_client_r5paxg2j SCENARIO="simple-p2p...

just in case, all logs logs-orig = QuicTLS logs-aws = aws-lc logs-libressl = LibreSSL [interop.zip](https://github.com/haproxy/haproxy/files/13997375/interop.zip)

same test for wolfssl passed [logs-wolfssl.zip](https://github.com/haproxy/haproxy/files/14001092/logs-wolfssl.zip)

it was haproxy master branch at the moment of testing. unfortunately, I didn't collect git hash I may run tests again (with git hash collected)

I think we can trust the following ``` server | haproxy version HAProxy version 0eaf42a2a47f2ee73045e48274ed98e00aa44dba 2024/01/06 - https://haproxy.org/ server | Status: development branch - not safe for use in production....

it was reproducible for me across many runs. there's a chance that it is something resource consuming (I ran on low end laptop), it would be nice to compare with...

> Playing the game of the 7 differences with the server logs, one interesting point is that haproxy does not generate post-handshake when using LibreSSL (`quic_build_post_handshake_frames()`). Hence, it explains why...

I can actually test other clients, but I'm not sure what to do with test results. ok, we'll have even more server log with differences.... and no easy answers