AWS elasticloadbalancing documentation change
Summary
Added support for QUIC and TCP_QUIC protocols, updated WebSocket support, and clarified QUIC version requirements
Security assessment
The changes introduce new protocol support (QUIC/TCP_QUIC) and technical limitations (QUIC version enforcement), but there's no evidence of addressing existing vulnerabilities or security weaknesses. The RFC9000 reference indicates standards compliance rather than security remediation.
Diff
diff --git a/elasticloadbalancing/latest/network/load-balancer-listeners.md b/elasticloadbalancing/latest/network/load-balancer-listeners.md index ec8b3b1ad..ff9b41ccf 100644 --- a//elasticloadbalancing/latest/network/load-balancer-listeners.md +++ b//elasticloadbalancing/latest/network/load-balancer-listeners.md @@ -44 +44 @@ Listeners support the following protocols and ports: - * **Protocols** : TCP, TLS, UDP, TCP_UDP + * **Protocols** : TCP, TLS, UDP, TCP_UDP, QUIC, TCP_QUIC @@ -54,0 +55,2 @@ If you must ensure that the targets decrypt TLS traffic instead of the load bala +You can use a QUIC listener to accept QUIC traffic. The Network Load Balancer acts as a pass through load balancer in accordance with [RFC9000](https://tools.ietf.org/html/rfc9000). Utilize a QUIC listener and QUIC enabled backends to enable seamless connection migration for mobile devices. + @@ -56,0 +59,2 @@ To support both TCP and UDP on the same port, create a TCP_UDP listener. The tar +To support both TCP and QUIC on the same port, create a TCP_QUIC listener. The target groups for a TCP_QUIC listener must use the TCP_QUIC protocol. + @@ -59 +63,3 @@ A UDP listener for a dualstack load balancer requires IPv6 target groups. -WebSockets is supported only on TCP, TLS, and TCP_UDP listeners. +WebSockets is supported only on TCP, TLS, TCP_UDP, and TCP_QUIC listeners. + +QUIC traffic does not support version negotiation. QUIC v1 is the only supported QUIC version.