tunnel — Layers on the Wire

tunnel — Layers on the Wire A data-flow diagram generated by Archify. 01 / Edge 02 / Tunnel 03 / Origin HTTPS request · from visitor · 01 / Edge HTTPS request from visitor TLS terminated · edge reads HTTP · 01 / Edge TLS terminated edge reads HTTP Stream mux · HTTP/2 over QUIC · 02 / Tunnel · stream per request Stream mux HTTP/2 over QUIC stream per request cloudflared · demux stream · 03 / Origin · connector cloudflared demux stream connector Origin app · localhost:8080 · 03 / Origin Origin app localhost:8080 decrypt edge TLS HTTP request plaintext in PoP QUIC packets PQ TLS 1.3 localhost TCP 127.0.0.1:8080 Legend primary data policy / PII data store data flow

Multiplexed

  • • One QUIC connection carries many requests
  • • Responses return on the same stream