klzgrad

> xcode 14.1 How so? I could reproduce with Xcode 14.1.

This `--limit-rate 10k` is pathological. If you use one instance of this with anything else, curl will be at 0 bytes/second most of the time because it simply does not...

Short lengths indicate h2 control frames.  Real h2: 48+: 200 HEADERS 40: Initial WINDOW_UPDATE + SETTINGS 17: PING 13: WINDOW_UPDATE, or RST_STREAM 9: empty DATA/SETTINGS -9: empty DATA/SETTINGS -13:...

Real h2 inference -64: The first packet from client side has a fixed size. (Magic + SETTINGS + WINDOW_UPDATE) 40: The first packet from serve side has a fixed size....

Some h2 traffic samples of accessing Alexa top 100 sites.  Padding towards lengths in [200, 800] is probably ok.

Recent evaluations of website fingerprinting against multiplexed HTTP/2: https://tools.ietf.org/html/draft-wood-pearg-website-fingerprinting-00 https://nikita.ca/papers/h2fp-madweb19.pdf https://dl.acm.org/doi/pdf/10.1145/3339252.3341478 https://dl.acm.org/doi/pdf/10.1145/3357384.3357993

> used GOlang to reproduce You can use tcpdump or wireshark to capture the loopback traffic between haproxy and the backend and see if the headers (proxy authorization, padding) are...

I didn't find a HAProxy build with QUIC enabled and don't have time to build it. So close it for now.

v2rayN claims to support naiveproxy: https://github.com/2dust/v2rayN/commit/c2ea14151e7cbaf0f49da1177d9acf2bd3e7af1e

https://github.com/MatsuriDayo/Matsuri claims support of naiveproxy.