Wire together TLS, packet codec, and stream buffers into a single client
QuicConnection that drives the handshake and 1-RTT exchange.
- QuicConnection owns per-encryption-level state (LevelState): packet number
space, ACK tracker, CRYPTO send + receive buffers, send + receive packet
protection. Initial keys are installed at construction from a random DCID.
- TlsSecretsListener inside the connection installs handshake + application
keys as the TLS state machine derives them.
- AckTracker maintains a sorted disjoint-range list of received packet
numbers and emits RFC 9000 §19.3-shaped ACK frames newest-first.
- SendBuffer + per-stream QuicStream allow application code to enqueue bytes
and FIN; the connection's writer drains them into STREAM frames.
- QuicConnectionParser dispatches inbound CRYPTO/STREAM/DATAGRAM/MAX_*/ACK/
CONNECTION_CLOSE frames into the right state. Coalesced packets in a single
datagram are demultiplexed.
- QuicConnectionWriter builds outbound datagrams that coalesce Initial +
Handshake + 1-RTT packets, pads Initial datagrams to 1200 bytes, and
drains stream send queues round-robin under a soft MTU budget.
- TransportParameters codec covers all RFC 9000 §18.2 + RFC 9221 fields and
is exchanged via the TLS quic_transport_parameters extension.
- PacketProtectionBuilder maps a TLS traffic secret + cipher suite to the
AEAD + HP triple via RFC 9001's `quic key`/`quic iv`/`quic hp` labels.
https://claude.ai/code/session_01EC1tfXfap8k8GyKvrxkxZx
Claude
52ab84acfe