[MDA2AV]

All eleven published packages share one version, as always. The bump is only their Version elements; IoxideRuntime.Version is generated from ioxide.csproj. ioxide.redis.stackexchange is bumped too, so a manual pack matches, but CI does not pack it.

Carries everything since 0.18.374:

• Reactor:
  • reactor: a ServerConfig size the reactor cannot run with is refused at construction instead of at the first accept #359: a ServerConfig size the reactor cannot run with is refused when the Reactor is constructed, instead of at the first accept.
  • reactor: a stop frees the native memory of its pooled connections and its spare write slabs #360: a stop frees the native memory of its pooled connections and its spare write slabs.
  • reactor: handoffs from other threads share one eventfd write per loop pass, as posts already did #387: handoffs from other threads share one eventfd write per loop pass, as posts already did: 6.9% less CPU per request for a handler that leaves the reactor thread.
  • ring: the ring's descriptor is registered, so an enter skips the fget/fput of it #391: the ring's descriptor is registered, so an enter skips the fget/fput of it (7-8 ns per enter).
• TCP:
  • config: a ServerConfig opens no TCP listener unless it sets Tcp, so a QUIC-only server no longer binds 8080 #364: a ServerConfig opens no TCP listener unless it sets Tcp, so a QUIC-only server no longer binds 8080.
  • tcp: ZeroCopySend reaches incremental-mode connections instead of being silently ignored #361: ZeroCopySend reaches incremental-mode connections instead of being silently ignored.
  • tcp: a stalled zero-copy send is released at SendTimeoutMs instead of pinning its connection forever #365: a stalled zero-copy send is released at SendTimeoutMs instead of pinning its connection forever.
• QUIC:
  • quic: a second ClientHello naming a different host than the first is refused instead of answered #376: a second ClientHello naming a different host than the first is refused instead of answered.
  • quic: a client common name carrying a control character is refused, as TCP refuses it #377: a client common name carrying a control character is refused, as TCP refuses it.
  • quic: a reactor shutdown tells its peers with a CONNECTION_CLOSE instead of leaving them to time out #380: a reactor shutdown tells its peers with a CONNECTION_CLOSE instead of leaving them to time out.
  • quic: a rotation re-reads client trust anchors from their file, as TCP does #388: a rotation re-reads client trust anchors from their file, as TCP does.
  • quic: the handler can read the verified client certificate, QuicEngineConnection.PeerCertificateDer #389: the handler can read the verified client certificate, QuicEngineConnection.PeerCertificateDer.
  • quic: client certificates that chain to the anchor and must still be refused are tested on QUIC #390: client certificates that chain to the anchor and must still be refused are tested on QUIC (tests only).
• HTTP/2:
  • http2: DATA on an idle stream is a PROTOCOL_ERROR instead of being credited and dropped #378: DATA on an idle stream is a PROTOCOL_ERROR instead of being credited and dropped.
  • http2: a buffered response stays inside the peer's stream window and waits for credit instead of being reset #379: a buffered response stays inside the peer's stream window and waits for credit instead of being reset.
• HTTP/3:
  • nghttp3: a connection that did not negotiate h3 is refused instead of served #381: nghttp3 refuses a connection that did not negotiate h3 instead of serving it.
  • http3: closing or resetting the peer's control or QPACK stream ends the connection with H3_CLOSED_CRITICAL_STREAM instead of being ignored #382: closing or resetting the peer's control or QPACK stream ends the connection with H3_CLOSED_CRITICAL_STREAM instead of being ignored.
  • http3: a request whose body does not match its content-length is refused with H3_MESSAGE_ERROR instead of being served #383: a request whose body does not match its content-length is refused with H3_MESSAGE_ERROR instead of being served.

Breaking

• API: none. Package validation against the 0.18.374 packages on NuGet (EnablePackageValidation, baseline 0.18.374) reports no break in the eleven packages; quic: the handler can read the verified client certificate, QuicEngineConnection.PeerCertificateDer #389's PeerCertificateDer is an addition. As a control, ioxide against 0.16.281 reports the known CreateTcp change.
• Behaviour:
  • config: a ServerConfig opens no TCP listener unless it sets Tcp, so a QUIC-only server no longer binds 8080 #364: ServerConfig.Tcp now defaults to null, which opens no TCP listener. A server that never set Tcp and served TCP on 8080 must set Tcp = new TcpOptions(). The Kestrel adapter sets it itself.
  • reactor: a ServerConfig size the reactor cannot run with is refused at construction instead of at the first accept #359: a size the reactor cannot run with (a RecvQueueEntries or RecvSlots that is not a power of two, a WriteSlabSize of 0, ...) throws ArgumentOutOfRangeException from the Reactor constructor.
  • quic: a rotation re-reads client trust anchors from their file, as TCP does #388: a rotation whose client CA bundle no longer loads fails, instead of keeping the old anchors.
  • quic: a second ClientHello naming a different host than the first is refused instead of answered #376, quic: a client common name carrying a control character is refused, as TCP refuses it #377, http2: DATA on an idle stream is a PROTOCOL_ERROR instead of being credited and dropped #378, nghttp3: a connection that did not negotiate h3 is refused instead of served #381, http3: closing or resetting the peer's control or QPACK stream ends the connection with H3_CLOSED_CRITICAL_STREAM instead of being ignored #382, http3: a request whose body does not match its content-length is refused with H3_MESSAGE_ERROR instead of being served #383: a peer that was served or ignored before is now refused, or closed with the error named above.

Native

• libioxide_ngtcp2.so: rebuilt by scripts/build-ngtcp2-native.sh for quic: a second ClientHello naming a different host than the first is refused instead of answered #376, quic: a client common name carrying a control character is refused, as TCP refuses it #377, quic: a rotation re-reads client trust anchors from their file, as TCP does #388 and quic: the handler can read the verified client certificate, QuicEngineConnection.PeerCertificateDer #389 (2.9 MB, as before). Its ABI goes from 6 to 7, for quic: the handler can read the verified client certificate, QuicEngineConnection.PeerCertificateDer #389's iq_conn_peer_certificate.
• libioxide_boringssl.so, libioxide_nghttp2.so and libioxide_nghttp3.so are unchanged.

The packages ship the library; consumers rebuild nothing. Checked from outside the repo: a net10.0 app referencing the packed ioxide, ioxide.ngtcp2 and ioxide.http3 0.20.392, restored into a private packages folder, reports IoxideRuntime.Version 0.20.392 and serves h3 and TCP on one reactor. curl-h3, verifying against the app's CA, gets the h3 response, and without the CA it refuses the certificate. The app loads libioxide_ngtcp2.so from the package's runtimes/linux-x64/native, byte-identical to the one committed here.

On this branch's tree (main at b0fbb69, plus the bump), all eight suites pass with none skipped: E2E 326, Unit 105, Http 89, Tls 194, Chaos 80, File 5, Pg 18 and Redis 6. The tls module was loaded, so the kTLS tests ran.

One test stays pending, in Redis (#336): it pins a known gap and fails the run once the gap is fixed. The other seven suites have none left.