{"id":7520,"date":"2022-05-05T12:24:37","date_gmt":"2022-05-05T09:24:37","guid":{"rendered":"https:\/\/vasexperts.com\/?p=7520"},"modified":"2025-08-12T14:49:52","modified_gmt":"2025-08-12T11:49:52","slug":"from-tcp-to-quic","status":"publish","type":"post","link":"https:\/\/vasexperts.com\/br\/blog\/functionality\/from-tcp-to-quic\/","title":{"rendered":"De TCP a QUIC. Assinaturas do Stingray SG"},"content":{"rendered":"No processo de padroniza\u00e7\u00e3o pela organiza\u00e7\u00e3o IETF, o QUIC foi dividido em protocolos de transporte e HTTP. Usando o transporte QUIC, n\u00e3o apenas os dados HTTP s\u00e3o transmitidos, mas tamb\u00e9m outros dados \u2013 o Grupo de Trabalho QUIC est\u00e1 envolvido nesse desenvolvimento.\r\n\r\nO QUIC implica a criptografia obrigat\u00f3ria do tr\u00e1fego: para isso, ele usa o TLS 1.3 para definir chaves de sess\u00e3o e, em seguida, criptografar cada pacote. Mas, como ele \u00e9 baseado em UDP, muitas das informa\u00e7\u00f5es de sess\u00e3o e metadados abertos no TCP s\u00e3o criptografados no QUIC.\r\n\r\n<noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/05\/quic-tcp-udp.png\" alt=\"quic, tcp, udp\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-7525\" srcset=\"\/wp-content\/uploads\/2022\/05\/quic-tcp-udp.png 1592w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-300x77.png 300w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-1024x264.png 1024w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-768x198.png 768w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-1536x397.png 1536w\" sizes=\"(max-width: 1592px) 100vw, 1592px\"><\/noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/05\/quic-tcp-udp.png\" alt=\"quic, tcp, udp\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-7525 lazyload\" sizes=\"(max-width: 1592px) 100vw, 1592px\" data-src=\"\/wp-content\/uploads\/2022\/05\/quic-tcp-udp.png\" data-srcset=\"\/wp-content\/uploads\/2022\/05\/quic-tcp-udp.png 1592w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-300x77.png 300w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-1024x264.png 1024w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-768x198.png 768w, \/wp-content\/uploads\/2022\/05\/quic-tcp-udp-1536x397.png 1536w\">\r\n\r\n<h2>Como o Stingray SG processa o QUIC<\/h2>\r\nAntes do surgimento do QUIC, a detec\u00e7\u00e3o de conex\u00f5es HTTPS criptografadas levava em conta o SNI (Server Name Indication), que era transmitido de forma clara quando o cliente entrava em contato com o servidor.\r\n\r\nO padr\u00e3o QUIC da IETF introduz a criptografia SNI, o que complica a detec\u00e7\u00e3o do host ao qual a conex\u00e3o est\u00e1 sendo feita. Desde a vers\u00e3o 11.2 do Stingray SG, a descriptografia SNI tornou-se dispon\u00edvel ao estabelecer uma conex\u00e3o usando o protocolo QUIC IETF. Esse recurso tornou poss\u00edvel dividir as conex\u00f5es do protocolo QUIC IETF em assinaturas separadas, para as quais o QUIC \u00e9 o transporte.\r\n\r\n<noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation.png\" alt=\"aloca\u00e7\u00e3o de tr\u00e1fego de canal comum\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-7526\" srcset=\"\/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation.png 1247w, \/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation-300x185.png 300w, \/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation-1024x632.png 1024w, \/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation-768x474.png 768w\" sizes=\"(max-width: 1247px) 100vw, 1247px\"><\/noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation.png\" alt=\"aloca\u00e7\u00e3o de tr\u00e1fego de canal comum\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-7526 lazyload\" sizes=\"(max-width: 1247px) 100vw, 1247px\" data-src=\"\/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation.png\" data-srcset=\"\/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation.png 1247w, \/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation-300x185.png 300w, \/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation-1024x632.png 1024w, \/wp-content\/uploads\/2022\/05\/common-channel-traffic-allocation-768x474.png 768w\">\r\n\r\nVemos que os protocolos HTTP\/HTTPS e QUIC\/QUIC IETF est\u00e3o presentes no canal comum. Isso nos diz que h\u00e1 uma transi\u00e7\u00e3o suave para novos padr\u00f5es. A aloca\u00e7\u00e3o de aplicativos baseados nesses protocolos \u00e9 realizada pelo nome dos dom\u00ednios de host nos quais o conte\u00fado est\u00e1 localizado, por exemplo, YOUTUBE, TWITTER, FACEBOOK, INSTAGRAM.\r\n\r\n<h2>Assinaturas do SGStingray<\/h2>\r\nAs assinaturas significam padr\u00f5es de pesquisa de tr\u00e1fego que s\u00e3o carregados no mecanismo DPI. Elas s\u00e3o usadas para a varredura constante de todos os pacotes IP a fim de determinar se o fluxo (IPscr:porta \u2013 IPdst:porta) pertence a um determinado aplicativo\/protocolo\/assinatura.\r\n\r\nAs assinaturas no Stingray SG s\u00e3o divididas em dois grupos:\r\n<ol>\r\n\t<li>Comuns<\/li>\r\n\t<li>Personalizadas ou program\u00e1veis.<\/li>\r\n<\/ol>\r\n\r\n<h3>Assinaturas comuns<\/h3>\r\nAdicionadas e modificadas somente pelos desenvolvedores do VAS Experts. Elas s\u00e3o carregadas no Stingray SG quando a vers\u00e3o do software Stingray SG \u00e9 atualizada.\r\n\r\n<h3>Assinaturas personalizadas<\/h3>\r\nS\u00e3o adicionadas pelo usu\u00e1rio por meio da GUI Stingray SG usando uma conta pessoal no VAS Cloud.\r\n\r\n<noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/05\/vas-cloud.png\" alt=\"vas cloud\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-7527\" srcset=\"\/wp-content\/uploads\/2022\/05\/vas-cloud.png 1914w, \/wp-content\/uploads\/2022\/05\/vas-cloud-300x111.png 300w, \/wp-content\/uploads\/2022\/05\/vas-cloud-1024x379.png 1024w, \/wp-content\/uploads\/2022\/05\/vas-cloud-768x284.png 768w, \/wp-content\/uploads\/2022\/05\/vas-cloud-1536x569.png 1536w\" sizes=\"(max-width: 1914px) 100vw, 1914px\"><\/noscript><img decoding=\"async\" src=\"\/wp-content\/uploads\/2022\/05\/vas-cloud.png\" alt=\"vas cloud\" width=\"100%\" height=\"auto\" class=\"alignnone size-full wp-image-7527 lazyload\" sizes=\"(max-width: 1914px) 100vw, 1914px\" data-src=\"\/wp-content\/uploads\/2022\/05\/vas-cloud.png\" data-srcset=\"\/wp-content\/uploads\/2022\/05\/vas-cloud.png 1914w, \/wp-content\/uploads\/2022\/05\/vas-cloud-300x111.png 300w, \/wp-content\/uploads\/2022\/05\/vas-cloud-1024x379.png 1024w, \/wp-content\/uploads\/2022\/05\/vas-cloud-768x284.png 768w, \/wp-content\/uploads\/2022\/05\/vas-cloud-1536x569.png 1536w\">\r\n\r\nA assinatura personalizada \u00e9 determinada pelo IP ou pelo nome de dom\u00ednio do host (SNI) com o qual o usu\u00e1rio interage. Todos os fluxos com esses par\u00e2metros s\u00e3o marcados com a assinatura apropriada e, no futuro, podem ser definidos em uma das oito classes de policiamento, ignorados sem processamento ou bloqueados.\r\n\r\n [subscription id=\u201d 11987\u2033]Assine nosso boletim informativo e fique atualizado sobre os \u00faltimos desenvolvimentos e ofertas especiais.","protected":false},"excerpt":{"rendered":"<p>Brevemente sobre o QUIC: O QUIC \u00e9 um protocolo de transporte de comunica\u00e7\u00e3o que \u00e9 considerado um substituto do TCP devido \u00e0 maior confiabilidade, seguran\u00e7a e lat\u00eancia reduzida e funciona sobre o UDP. Essa tecnologia foi criada por desenvolvedores do Google e inicialmente chamada de &#8220;HTTP\/2-encrypted-over-UDP&#8221;.<\/p>\n","protected":false},"author":7,"featured_media":7524,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[],"class_list":["post-7520","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-functionality"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>(English) VASExperts<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/\",\"url\":\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/\",\"name\":\"[:en]From TCP to QUIC. Stingray SG Signatures \u2014 VAS Experts Blog[:es]Transici\u00f3n de TCP a QUIC. Firmas Stingray SG \u2014 VAS Experts Blog[:fr]Passage de TCP \u00e0 QUIC. Signatures Stingray SG \u2014 VAS Experts Blog[:br]Do TCP ao QUIC. Assinaturas do Stingray SG \u2014 Blog de VAS Experts\",\"isPartOf\":{\"@id\":\"https:\/\/vasexperts.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#primaryimage\"},\"thumbnailUrl\":\"\/wp-content\/uploads\/2022\/05\/quic-signature.jpg\",\"datePublished\":\"2022-05-05T09:24:37+00:00\",\"dateModified\":\"2025-08-12T11:49:52+00:00\",\"author\":{\"@id\":\"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170\"},\"description\":\"[:en]QUIC implies mandatory encryption of traffic: to do this, it uses TLS 1.3 to set session keys, and then encrypt each package.[:es]QUIC implica encriptaci\u00f3n de tr\u00e1fico obligatoria: para esto, utiliza TLS 1.3 para establecer claves de sesi\u00f3n y luego encripta cada paquete.[:fr]QUIC implique un cryptage du trafic obligatoire : pour ce faire, il utilise TLS 1.3 pour d\u00e9finir les cl\u00e9s de session, puis crypter chaque paquet.[:br]O QUIC implica a criptografia obrigat\u00f3ria do tr\u00e1fego: para isso, ele usa o TLS 1.3 para definir as chaves de sess\u00e3o e, em seguida, criptografar cada pacote\",\"breadcrumb\":{\"@id\":\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#breadcrumb\"},\"inLanguage\":\"br-PT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"br-PT\",\"@id\":\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#primaryimage\",\"url\":\"\/wp-content\/uploads\/2022\/05\/quic-signature.jpg\",\"contentUrl\":\"\/wp-content\/uploads\/2022\/05\/quic-signature.jpg\",\"width\":1740,\"height\":1080,\"caption\":\"quic-signature\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\",\"item\":\"https:\/\/vasexperts.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"From TCP to QUIC. Stingray SG Signatures\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/vasexperts.com\/#website\",\"url\":\"https:\/\/vasexperts.com\/\",\"name\":\"ITGLOBAL.COM\",\"description\":\"(English) VASExperts\",\"inLanguage\":\"br-PT\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170\",\"name\":\"Elena Rudich\",\"url\":\"https:\/\/vasexperts.com\/br\/blog\/author\/elena-rudich\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"(English) VASExperts","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/","url":"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/","name":"[:en]From TCP to QUIC. Stingray SG Signatures \u2014 VAS Experts Blog[:es]Transici\u00f3n de TCP a QUIC. Firmas Stingray SG \u2014 VAS Experts Blog[:fr]Passage de TCP \u00e0 QUIC. Signatures Stingray SG \u2014 VAS Experts Blog[:br]Do TCP ao QUIC. Assinaturas do Stingray SG \u2014 Blog de VAS Experts","isPartOf":{"@id":"https:\/\/vasexperts.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#primaryimage"},"image":{"@id":"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#primaryimage"},"thumbnailUrl":"\/wp-content\/uploads\/2022\/05\/quic-signature.jpg","datePublished":"2022-05-05T09:24:37+00:00","dateModified":"2025-08-12T11:49:52+00:00","author":{"@id":"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170"},"description":"[:en]QUIC implies mandatory encryption of traffic: to do this, it uses TLS 1.3 to set session keys, and then encrypt each package.[:es]QUIC implica encriptaci\u00f3n de tr\u00e1fico obligatoria: para esto, utiliza TLS 1.3 para establecer claves de sesi\u00f3n y luego encripta cada paquete.[:fr]QUIC implique un cryptage du trafic obligatoire : pour ce faire, il utilise TLS 1.3 pour d\u00e9finir les cl\u00e9s de session, puis crypter chaque paquet.[:br]O QUIC implica a criptografia obrigat\u00f3ria do tr\u00e1fego: para isso, ele usa o TLS 1.3 para definir as chaves de sess\u00e3o e, em seguida, criptografar cada pacote","breadcrumb":{"@id":"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#breadcrumb"},"inLanguage":"br-PT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/"]}]},{"@type":"ImageObject","inLanguage":"br-PT","@id":"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#primaryimage","url":"\/wp-content\/uploads\/2022\/05\/quic-signature.jpg","contentUrl":"\/wp-content\/uploads\/2022\/05\/quic-signature.jpg","width":1740,"height":1080,"caption":"quic-signature"},{"@type":"BreadcrumbList","@id":"https:\/\/vasexperts.com\/blog\/functionality\/from-tcp-to-quic\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/vasexperts.com\/"},{"@type":"ListItem","position":2,"name":"From TCP to QUIC. Stingray SG Signatures"}]},{"@type":"WebSite","@id":"https:\/\/vasexperts.com\/#website","url":"https:\/\/vasexperts.com\/","name":"ITGLOBAL.COM","description":"(English) VASExperts","inLanguage":"br-PT"},{"@type":"Person","@id":"https:\/\/vasexperts.com\/#\/schema\/person\/f4edcaef26fe49b6b59baf8ac5b62170","name":"Elena Rudich","url":"https:\/\/vasexperts.com\/br\/blog\/author\/elena-rudich\/"}]}},"_links":{"self":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts\/7520"}],"collection":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/comments?post=7520"}],"version-history":[{"count":10,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts\/7520\/revisions"}],"predecessor-version":[{"id":12953,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/posts\/7520\/revisions\/12953"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/media\/7524"}],"wp:attachment":[{"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/media?parent=7520"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/categories?post=7520"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vasexperts.com\/br\/wp-json\/wp\/v2\/tags?post=7520"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}