mirror of
https://github.com/curl/curl.git
synced 2026-06-02 08:14:15 +03:00
e78b1b3ecc
This patch adds two major proxy capabilities to curl (ngtcp2 QUIC):
- HTTP/3 Proxy CONNECT: Tunnel HTTP/1.1 or HTTP/2 traffic through an
HTTPS proxy that speaks HTTP/3 (QUIC) using the standard CONNECT
method over an HTTP/3 connection.
- MASQUE CONNECT-UDP: Tunnel HTTP/3 (QUIC) traffic through an HTTP
proxy (speaking HTTP/1.1, HTTP/2, or HTTP/3) using the extended
CONNECT method with the CONNECT-UDP protocol (RFC9297 & RFC9298).
Public API additions:
- `CURLPROXY_HTTPS3`: new proxy type constant for HTTP/3 proxy
- `--proxy-http3`: new CLI flag to negotiate HTTP/3 with HTTPS proxy
The implementation adds two new filters:
- `H3-PROXY` - enables negotiating HTTP/3 (QUIC) to the proxy and
running CONNECT/CONNECT-UDP through that proxy transport.
- `CAPSULE` - dedicated filter inserted between QUIC transport and
HTTP-PROXY to handle datagram capsule encapsulation/decapsulation.
Here is how the curl filter chaining looks in different scenarios:
- HTTP/3 Proxy CONNECT (tunneling TCP protocols over QUIC proxy):
conn -> HTTP/1.1 or HTTP/2 -> SSL -> HTTP-PROXY ->
H3-PROXY -> HAPPY-EYEBALLS -> UDP
- MASQUE CONNECT-UDP (tunneling QUIC over any proxy):
conn -> HTTP/3 -> CAPSULE -> HTTP-PROXY -> H3-PROXY ->
HAPPY-EYEBALLS -> UDP
conn -> HTTP/3 -> CAPSULE -> HTTP-PROXY -> H1-PROXY or H2-PROXY ->
SSL -> HAPPY-EYEBALLS -> TCP
- Both features currently require the ngtcp2 QUIC backend.
- Both features are experimental (disabled by default). Enable with
`--enable-proxy-http3`(autotools) or `-DUSE_PROXY_HTTP3=ON`(CMake).
Tests:
- tests/unit/unit3400.c: Unit tests for capsule protocol encode/decode
- tests/http/test_60_h3_proxy.py: Comprehensive pytest integration suite
- tests/http/testenv/h2o.py: Managing h2o instances with HTTP/1.1, HTTP/2,
and HTTP/3 (QUIC) listeners, proxy.connect and proxy.connect-udp enabled.
References:
RFC 9297 - HTTP Datagrams and the Capsule Protocol
RFC 9298 - Proxying UDP in HTTP
RFC 9000 §16 — Variable-Length Integer Encoding
Signed-off-by: Aritra Basu <aritrbas+gh@cisco.com>
Closes #21153
286 lines
12 KiB
Text
286 lines
12 KiB
Text
_ _ ____ _
|
|
___| | | | _ \| |
|
|
/ __| | | | |_) | |
|
|
| (__| |_| | _ <| |___
|
|
\___|\___/|_| \_\_____|
|
|
|
|
This document lists all command line options present in curl, together with
|
|
exact information about the first curl version that supports it. The options
|
|
are sorted alphabetically on the long name.
|
|
|
|
Long (short) Introduced
|
|
|
|
--abstract-unix-socket 7.53.0
|
|
--alt-svc 7.64.1
|
|
--anyauth 7.10.6
|
|
--append (-a) 4.8
|
|
--aws-sigv4 7.75.0
|
|
--basic 7.10.6
|
|
--ca-native 8.2.0
|
|
--cacert 7.5
|
|
--capath 7.9.8
|
|
--cert (-E) 5.0
|
|
--cert-status 7.41.0
|
|
--cert-type 7.9.3
|
|
--ciphers 7.9
|
|
--compressed 7.10
|
|
--compressed-ssh 7.56.0
|
|
--config (-K) 4.10
|
|
--connect-timeout 7.7
|
|
--connect-to 7.49.0
|
|
--continue-at (-C) 4.8
|
|
--cookie (-b) 4.9
|
|
--cookie-jar (-c) 7.9
|
|
--create-dirs 7.10.3
|
|
--create-file-mode 7.75.0
|
|
--crlf 5.7
|
|
--crlfile 7.19.7
|
|
--curves 7.73.0
|
|
--data (-d) 4.0
|
|
--data-ascii 7.2
|
|
--data-binary 7.2
|
|
--data-raw 7.43.0
|
|
--data-urlencode 7.18.0
|
|
--delegation 7.22.0
|
|
--digest 7.10.6
|
|
--disable (-q) 5.0
|
|
--disable-eprt 7.10.5
|
|
--disable-epsv 7.9.2
|
|
--disallow-username-in-url 7.61.0
|
|
--dns-interface 7.33.0
|
|
--dns-ipv4-addr 7.33.0
|
|
--dns-ipv6-addr 7.33.0
|
|
--dns-servers 7.33.0
|
|
--doh-cert-status 7.76.0
|
|
--doh-insecure 7.76.0
|
|
--doh-url 7.62.0
|
|
--dump-ca-embed 8.10.0
|
|
--dump-header (-D) 5.7
|
|
--ech 8.8.0
|
|
--egd-file 7.7
|
|
--engine 7.9.3
|
|
--etag-compare 7.68.0
|
|
--etag-save 7.68.0
|
|
--expect100-timeout 7.47.0
|
|
--fail (-f) 4.0
|
|
--fail-early 7.52.0
|
|
--fail-with-body 7.76.0
|
|
--false-start 7.42.0
|
|
--form (-F) 5.0
|
|
--form-escape 7.81.0
|
|
--form-string 7.13.2
|
|
--ftp-account 7.13.0
|
|
--ftp-alternative-to-user 7.15.5
|
|
--ftp-create-dirs 7.10.7
|
|
--ftp-method 7.15.1
|
|
--ftp-pasv 7.11.0
|
|
--ftp-port (-P) 4.0
|
|
--ftp-pret 7.20.0
|
|
--ftp-skip-pasv-ip 7.15.0
|
|
--ftp-ssl-ccc 7.16.1
|
|
--ftp-ssl-ccc-mode 7.16.2
|
|
--ftp-ssl-control 7.16.0
|
|
--get (-G) 7.8.1
|
|
--globoff (-g) 7.6
|
|
--happy-eyeballs-timeout-ms 7.59.0
|
|
--haproxy-protocol 7.60.0
|
|
--haproxy-clientip 8.2.0
|
|
--head (-I) 4.0
|
|
--header (-H) 5.0
|
|
--help (-h) 4.0
|
|
--hostpubmd5 7.17.1
|
|
--hostpubsha256 7.80.0
|
|
--hsts 7.74.0
|
|
--http0.9 7.64.0
|
|
--http1.0 (-0) 7.9.1
|
|
--http1.1 7.33.0
|
|
--http2 7.33.0
|
|
--http2-prior-knowledge 7.49.0
|
|
--http3 7.66.0
|
|
--http3-only 7.88.0
|
|
--ignore-content-length 7.14.1
|
|
--ip-tos 8.9.0
|
|
--ipfs-gateway 8.4.0
|
|
--insecure (-k) 7.10
|
|
--interface 7.3
|
|
--ipv4 (-4) 7.10.8
|
|
--ipv6 (-6) 7.10.8
|
|
--json 7.82.0
|
|
--junk-session-cookies (-j) 7.9.7
|
|
--keepalive-cnt 8.9.0
|
|
--keepalive-time 7.18.0
|
|
--key 7.9.3
|
|
--key-type 7.9.3
|
|
--knownhosts 8.17.0
|
|
--krb 7.3
|
|
--libcurl 7.16.1
|
|
--limit-rate 7.10
|
|
--list-only (-l) 4.0
|
|
--local-port 7.15.2
|
|
--location (-L) 4.9
|
|
--location-trusted 7.10.4
|
|
--login-options 7.34.0
|
|
--mail-auth 7.25.0
|
|
--mail-from 7.20.0
|
|
--mail-rcpt 7.20.0
|
|
--mail-rcpt-allowfails 7.69.0
|
|
--manual (-M) 5.2
|
|
--max-filesize 7.10.8
|
|
--max-redirs 7.5
|
|
--max-time (-m) 4.0
|
|
--metalink 7.27.0
|
|
--mptcp 8.9.0
|
|
--negotiate 7.10.6
|
|
--netrc (-n) 4.6
|
|
--netrc-file 7.21.5
|
|
--netrc-optional 7.9.8
|
|
--next (-:) 7.36.0
|
|
--no-alpn 7.36.0
|
|
--no-buffer (-N) 6.5
|
|
--no-clobber 7.83.0
|
|
--no-keepalive 7.18.0
|
|
--no-npn 7.36.0
|
|
--no-progress-meter 7.67.0
|
|
--no-sessionid 7.16.0
|
|
--noproxy 7.19.4
|
|
--ntlm 7.10.6
|
|
--ntlm-wb 7.22.0
|
|
--oauth2-bearer 7.33.0
|
|
--out-null 8.16.0
|
|
--output (-o) 4.0
|
|
--output-dir 7.73.0
|
|
--parallel (-Z) 7.66.0
|
|
--parallel-immediate 7.68.0
|
|
--parallel-max 7.66.0
|
|
--parallel-max-host 8.16.0
|
|
--pass 7.9.3
|
|
--path-as-is 7.42.0
|
|
--pinnedpubkey 7.39.0
|
|
--post301 7.17.1
|
|
--post302 7.19.1
|
|
--post303 7.26.0
|
|
--preproxy 7.52.0
|
|
--progress-bar (-#) 5.10
|
|
--proto 7.21.0
|
|
--proto-default 7.45.0
|
|
--proto-redir 7.21.0
|
|
--proxy (-x) 4.0
|
|
--proxy-anyauth 7.13.2
|
|
--proxy-basic 7.12.0
|
|
--proxy-ca-native 8.2.0
|
|
--proxy-cacert 7.52.0
|
|
--proxy-capath 7.52.0
|
|
--proxy-cert 7.52.0
|
|
--proxy-cert-type 7.52.0
|
|
--proxy-ciphers 7.52.0
|
|
--proxy-crlfile 7.52.0
|
|
--proxy-digest 7.12.0
|
|
--proxy-header 7.37.0
|
|
--proxy-http2 8.1.0
|
|
--proxy-http3 8.21.0
|
|
--proxy-insecure 7.52.0
|
|
--proxy-key 7.52.0
|
|
--proxy-key-type 7.52.0
|
|
--proxy-negotiate 7.17.1
|
|
--proxy-ntlm 7.10.7
|
|
--proxy-pass 7.52.0
|
|
--proxy-pinnedpubkey 7.59.0
|
|
--proxy-service-name 7.43.0
|
|
--proxy-ssl-allow-beast 7.52.0
|
|
--proxy-ssl-auto-client-cert 7.77.0
|
|
--proxy-tls13-ciphers 7.61.0
|
|
--proxy-tlsauthtype 7.52.0
|
|
--proxy-tlspassword 7.52.0
|
|
--proxy-tlsuser 7.52.0
|
|
--proxy-tlsv1 7.52.0
|
|
--proxy-user (-U) 4.0
|
|
--proxy1.0 7.19.4
|
|
--proxytunnel (-p) 7.3
|
|
--pubkey 7.16.2
|
|
--quote (-Q) 5.3
|
|
--random-file 7.7
|
|
--range (-r) 4.0
|
|
--rate 7.84.0
|
|
--raw 7.16.2
|
|
--follow 8.16.0
|
|
--referer (-e) 4.0
|
|
--remote-header-name (-J) 7.20.0
|
|
--remote-name (-O) 4.0
|
|
--remote-name-all 7.19.0
|
|
--remote-time (-R) 7.9
|
|
--remove-on-error 7.83.0
|
|
--request (-X) 6.0
|
|
--request-target 7.55.0
|
|
--resolve 7.21.3
|
|
--retry 7.12.3
|
|
--retry-all-errors 7.71.0
|
|
--retry-connrefused 7.52.0
|
|
--retry-delay 7.12.3
|
|
--retry-max-time 7.12.3
|
|
--sasl-authzid 7.66.0
|
|
--sasl-ir 7.31.0
|
|
--service-name 7.43.0
|
|
--show-error (-S) 5.9
|
|
--show-headers (-i) 4.8
|
|
--silent (-s) 4.0
|
|
--sigalgs 8.14.0
|
|
--skip-existing 8.10.0
|
|
--socks4 7.15.2
|
|
--socks4a 7.18.0
|
|
--socks5 7.18.0
|
|
--socks5-basic 7.55.0
|
|
--socks5-gssapi 7.55.0
|
|
--socks5-gssapi-nec 7.19.4
|
|
--socks5-gssapi-service 7.19.4
|
|
--socks5-hostname 7.18.0
|
|
--speed-limit (-Y) 4.7
|
|
--speed-time (-y) 4.7
|
|
--ssl 7.20.0
|
|
--ssl-allow-beast 7.25.0
|
|
--ssl-auto-client-cert 7.77.0
|
|
--ssl-no-revoke 7.44.0
|
|
--ssl-reqd 7.20.0
|
|
--ssl-revoke-best-effort 7.70.0
|
|
--ssl-sessions 8.12.0
|
|
--sslv2 (-2) 5.9
|
|
--sslv3 (-3) 5.9
|
|
--stderr 6.2
|
|
--styled-output 7.61.0
|
|
--suppress-connect-headers 7.54.0
|
|
--tcp-fastopen 7.49.0
|
|
--tcp-nodelay 7.11.2
|
|
--telnet-option (-t) 7.7
|
|
--tftp-blksize 7.20.0
|
|
--tftp-no-options 7.48.0
|
|
--time-cond (-z) 5.8
|
|
--tls-earlydata 8.11.0
|
|
--tls-max 7.54.0
|
|
--tls13-ciphers 7.61.0
|
|
--tlsauthtype 7.21.4
|
|
--tlspassword 7.21.4
|
|
--tlsuser 7.21.4
|
|
--tlsv1 (-1) 7.9.2
|
|
--tlsv1.0 7.34.0
|
|
--tlsv1.1 7.34.0
|
|
--tlsv1.2 7.34.0
|
|
--tlsv1.3 7.52.0
|
|
--tr-encoding 7.21.6
|
|
--trace 7.9.7
|
|
--trace-ascii 7.9.7
|
|
--trace-config 8.3.0
|
|
--trace-ids 8.2.0
|
|
--trace-time 7.14.0
|
|
--unix-socket 7.40.0
|
|
--upload-file (-T) 4.0
|
|
--upload-flags 8.13.0
|
|
--url 7.5
|
|
--url-query 7.87.0
|
|
--use-ascii (-B) 5.0
|
|
--user (-u) 4.0
|
|
--user-agent (-A) 4.5.1
|
|
--variable 8.3.0
|
|
--verbose (-v) 4.0
|
|
--version (-V) 4.0
|
|
--vlan-priority 8.9.0
|
|
--write-out (-w) 6.5
|
|
--xattr 7.21.3
|