HTTP/3 and UDP

Send UDP traffic through HTTP/3 with the same credential.

Masklabs supports MASQUE over HTTP/3 on proxy.masklabs.io through UDP port 443. This lets you send UDP traffic, such as QUIC, with the same credential as your other traffic.

The following standards are implemented:

CONNECT-UDP (RFC 9298). URI template: https://proxy.masklabs.io/.well-known/masque/udp/{target_host}/{target_port}/
The bind extension (draft-ietf-masque-connect-udp-listen-16), including Proxy-Public-Address
CONNECT over HTTP/3 (RFC 9114, section 4.4)

Login

Send Proxy-Authorization: Basic with every request. Use the same username and password as the other endpoints. Username suffixes work the same way.

Limits

Targets must be IPv4.
Idle sessions are closed.

Rejected requests include a Proxy-Status header (RFC 9209).

Billing

UDP traffic is billed the same as TCP traffic, in both directions.