-- Leo's gemini proxy
-- Connecting to gemini.conman.org:1965...
-- Connected
-- Sending request
-- Meta line: 20 text/gemini
The Gemini protocol [1] has inspried others to implement “simple” protocols, like Mercury [2] (alternate link [3]), Spartan [4] (alternate link [5]) and Nex [6] (alternate link [7]). But there's another protocol being designed that has me worried—Guppy [8] (alternate link [9]), which based on UDP (User Datagram Protocol) instead of TCP (Transmission Control Protocol).
Yes, UDP is simpler than TCP. Yes, you can get results with just one exchange of packets. But the downside of UDP is that you will be exploited for amplification attacks! I found this out the hard way [10] a few years ago and shut down my UDP QOTD (Quote Of The Day) service. Any time you have a UDP-based protocol where a small packet to the server results in a large packet from the server will be exploited with a constant barrage of forged packets. That's one reason for the TCP three-way handshake.
Also, the Guppy protocol spec states, “it's an experiment in designing a protocol simpler than Gopher and Spartan, which provides a similar feature set but with faster transfer speeds (for small documents) and using a much simpler software stack,” but there's a downside—you can easily over-saturate a link with data, which is another reason UDP is popular for amplification attacks. Congestion control is one reason why TCP exists (some say it's the only reason and the other benefits, like a reliable, stream-oriented connection is a side effect of the design).
My intent here isn't to discourage experimentation. I like the fact that people are experiementing with this stuff. But I do want to pass along some painful experiences I had when playing around with UDP on the open Internet.
-- Response ended
-- Page fetched on Mon May 20 14:37:43 2024