Lucas Pardue's Avatar

Lucas Pardue

@simmervig.org

Protocol nerd at Cloudflare. QUIC WG co-chair. Thoughts belong to me.

1,096
Followers
172
Following
68
Posts
26.10.2024
Joined
Posts Following

Latest posts by Lucas Pardue @simmervig.org

Renewed my @fastmail.com subscription after 2 years of it just working and no other bullshit. Feels good to pay for stuff like this.

24.01.2026 04:02 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Post image

Forty years ago, 21 people gathered for the first meeting of what became the IETF. Today, nearly 8000 IETF participants from around the world collaborate in more than 100 working groups and every day billions of people use technologies developed in the IETF. https://www.ietf.org/blog/ietf-40/

16.01.2026 18:30 πŸ‘ 43 πŸ” 21 πŸ’¬ 1 πŸ“Œ 8

Depending on the HTTP version, you can override priroty scheduler with more fine grain control via workers / origin header e.g. invoke a more serial order, or do banded round robin

30.12.2025 18:34 πŸ‘ 2 πŸ” 0 πŸ’¬ 2 πŸ“Œ 0

Nice. We use aasvg for some IETF docs

27.12.2025 19:13 πŸ‘ 1 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0
A demon with green lucrative pants on being dragged along the floor .

A demon with green lucrative pants on being dragged along the floor .

I'm watching Angel as a mindless guilty pleasure. In S2 E9, they seem to have forgotten to green screen the demon's lower half after it got chopped off. Not sure if this is due to 16:9 aspect or if the booboo was aired

23.12.2025 03:11 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
Go and enhance your calm- demolishing an HTTP:2 interop problem HTTP/2 implementations often respond to suspected attacks by closing the connection with an ENHANCE_YOUR_CALM error code. Learn how a common pattern of using Go's HTTP/2 client can lead to unintended ...

HTTP/2-based DoS attacks are here to stay. Many implementations are hardened to them. Quirky behaviour can trigger defenses and cause ENHANCE_YOUR_CALM.

Read one of my latest trips down a debugging rabbit hole.

blog.cloudflare.com/go-and-enhan...

31.10.2025 13:37 πŸ‘ 4 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
GitHub - cloudflare/telescope: Cross-browser web performance testing agent Cross-browser web performance testing agent. Contribute to cloudflare/telescope development by creating an account on GitHub.

Glad to announce that my team at @cloudflare.social released a 1.0.0 version of a cross-browser web performance testing agent that supports
Chrome, Firefox, Safari and Edge.

Thank you to @tkadlec.bsky.social for making it happen and writing most of the code so far!

github.com/cloudflare/t...

30.10.2025 14:32 πŸ‘ 33 πŸ” 12 πŸ’¬ 0 πŸ“Œ 1
Preview
Defending QUIC from acknowledgement-based DDoS attacks We identified and patched two DDoS vulnerabilities in our QUIC implementation related to packet acknowledgements. Cloudflare customers were not affected. We examine the

About 6 months ago Louis Navarre reached out to report some DoS-related vulnerabilities in quiche's ack processing. We fixed it up and saw no evidence that the vulnerabilities had been exploited. Check out the deep dive blog post: blog.cloudflare.com/defending-qu...

29.10.2025 18:01 πŸ‘ 2 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0
Ed Davey pointing at Tambo

Ed Davey pointing at Tambo

Rambo thumbs upping Ed Davey

Rambo thumbs upping Ed Davey

22.09.2025 18:05 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
MoQ: Refactoring the Internet's real-time media stack For years, developers have been stitching together multiple protocols for real-time media, trading latency for scale and simplicity. Media over QUIC (MoQ) is a new IETF standard that resolves this con...

Some news..
blog.cloudflare.com/moq/

22.08.2025 13:17 πŸ‘ 10 πŸ” 5 πŸ’¬ 2 πŸ“Œ 0

It would be funny it wasn't actually true

12.08.2025 20:21 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Android notification from YouTube for IETF session

Android notification from YouTube for IETF session

Hehe

25.07.2025 21:44 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

Insightful!

25.07.2025 17:18 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

Watching Usyk vs. Dubois squashed into a sports bar booth in Porto with 4 randoms, 2 from London, 2 from Ukraine, was not on the bingo card. But it all worked out.

19.07.2025 23:08 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
BBC article about porn age checks, festure image a man in bed on his phone

BBC article about porn age checks, festure image a man in bed on his phone

BBB news article about the Co-Op leak of 6.5 million customers data

BBB news article about the Co-Op leak of 6.5 million customers data

I can predict how these new age checks are going to go using two pictures

16.07.2025 11:55 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

I've heard of crackpot science.

I guess the future equivalent is grokbot science

16.07.2025 09:13 πŸ‘ 0 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
gRPC Conf 2025: Bringing HTTP/3 To gRPC at Cloudflare Sc... View more about this event at gRPC Conf 2025

I'm excited to announce I'll be at gRPC Conf on August 26 2025 to present how Cloudflare built its gRPC support first launched in 2020, and how we've been adding gRPC over HTTP/3 support lately.

Session details at: grpcconf2025.sched.com/event/26BMY/...

09.07.2025 16:37 πŸ‘ 2 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
HTTP Unencoded Digest The Repr-Digest and Content-Digest integrity fields are subject to HTTP content coding considerations. There are some use cases that benefit from the unambiguous exchange of integrity digests of unenc...

Hot off the press, happy to announce the adoption and publication of datatracker.ietf.org/doc/html/dra...

Unencoded Digest is one of the missing pieces for certain use cases like the W3C signature-based integrity work. Helping to cover cases where encoding and transform independence are paramount

07.07.2025 22:03 πŸ‘ 4 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Colin Perkins : Standards News : An IRTF Retrospective

An IRTF Retrospective – in which I reflect upon my time as Chair of the IRTF csperkins.org/standards/20...

16.06.2025 12:47 πŸ‘ 4 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0

You should check out Sultans of Swim

03.06.2025 00:41 πŸ‘ 2 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

Wouldn't call it vibe coding but I've been using some AI to add features to throwaway test toys written in Go to Get Shit Done.

Look out for some future updates about the $thing these toys are helping to make robust.

16.05.2025 23:13 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
Forget IPs: using cryptography to verify bot and agent traffic Bots now browse like humans. We're proposing bots use cryptographic signatures so that website owners can verify their identity. Explanations and demonstration code can be found within the post.

Using Internet standards to improve the the way automed traffic / bots can interact with the world. Namely two methods: HTTP Signatures (RFC 9421) and req mTLS flag (draft-jhoyla-req-mtls-flag)

blog.cloudflare.com/web-bot-auth/

15.05.2025 19:38 πŸ‘ 5 πŸ” 1 πŸ’¬ 0 πŸ“Œ 1

Enjoying Kagi quite a bit

11.05.2025 20:10 πŸ‘ 2 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Unsupported Browser | HackerOne

AI slop has gotta stop.

Hysterical* thing with this bullshit report to curl's hackerone (hackerone.com/reports/3125...) "HTTP/3 Stream Dependency Cycle Exploit" is we took great pains to standardize a priortization scheme that entirely did away with stream dependencies.

* not the jovial definition

09.05.2025 21:48 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0
Preview
The Cloudflare Protocols team is hiring for a number of roles! Come work… | Lucas Pardue The Cloudflare Protocols team is hiring for a number of roles! Come work with me and my awesome manager Michelle Torres πŸ³οΈβ€πŸŒˆ. We're looking for experienced mid-level and senior engineers to go d...

My team at Cloudflare are hiring mid-level and senior engineers to help us go deep on network protocols (HTTP, QUIC, TLS etc.) as we build and deploy our new Rust-based proxy.

More details (including location) over on LinkedIn: www.linkedin.com/posts/lucasp...

08.05.2025 01:47 πŸ‘ 4 πŸ” 2 πŸ’¬ 1 πŸ“Œ 0

Check out this cool shit

07.05.2025 22:54 πŸ‘ 5 πŸ” 1 πŸ’¬ 0 πŸ“Œ 0

Forget Vibe coding, the new buzz is Weiss Posting

02.05.2025 16:19 πŸ‘ 1 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

What's your process for bluesky posts?

02.05.2025 11:44 πŸ‘ 0 πŸ” 0 πŸ’¬ 1 πŸ“Œ 0
Paraphrasing Rick Rubin and saying "I have no technical ability. And know nothing about protocol minutae."

Paraphrasing Rick Rubin and saying "I have no technical ability. And know nothing about protocol minutae."

Gearing up to chair the next QUIC WG meeting be like

26.04.2025 22:34 πŸ‘ 2 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0

Multipath Extension for QUIC is now in Working Group Last Call.

datatracker.ietf.org/doc/draft-ie...

25.04.2025 20:31 πŸ‘ 4 πŸ” 0 πŸ’¬ 0 πŸ“Œ 0