Skip to content

MASQUE: Proxying IP and Ethernet in HTTP — draft-ietf-masque-connect-ip, draft-ietf-masque-connect-ethernet#

IETF 123 (Madrid) digest Program Core pick Madrid · 19–25 July 2025

Slides Session recording Materials

  • Tier: Core
  • Why: CONNECT-IP (and now CONNECT-Ethernet) turns HTTP/3 into a general-purpose tunneling substrate — VPN-like IP transport and even L2 transport over QUIC. This is increasingly relevant to cloud-native datapath and edge connectivity, and it overlaps your software-networking and WAN-interconnect interests.
  • What: connect-ip defines proxying IP packets in HTTP; connect-ethernet extends the same model to Ethernet frames. (from abstract only)
  • How: Both build on the HTTP Datagrams / Capsule Protocol so packets ride QUIC datagrams through an HTTP proxy, with IP- or Ethernet-level framing as the payload.
  • Where applicable: General; useful for VPN replacement, network-to-network tunneling, and reaching workloads behind HTTP proxies. CONNECT-Ethernet is the more experimental of the two.