Quick UDP Internet Protocol (QUIC) is a combination of (TCP+TLS+HTTP/2) protocols implemented on UDP. The QUIC transport protocol multiplexes the connections between two endpoints using UDP. Also when compared to other protocols, QUIC provides a high performance in terms of security, fast delivery of traffic, and lower latency.

A QUIC bridge is configured in a NetScaler appliance for load balancing QUIC traffic between a QUIC client and QUIC back-end server. The QUIC bridge enables you to have persistent QUIC connections between client and server if there is a NAT rebinding or a connection migration. This configuration however does not process data. It is used only for load balancing of QUIC traffic through the NetScaler appliance.

QUIC packets contain connection ID to allow endpoints to associate the packets with different address or 4-tuple to the same connection. The connection ID contains the details of the server ID that are shared to the NetScaler appliance and to the back end servers. The NetScaler appliance extracts the connection ID details of the server ID and sends the traffic back to the back end server. The connection IDs are in protected packets that makes the connections robust in the event of connection migration.


The back end servers must have support to encode server ID in QUIC connection ID.

Benefits of QUIC bridge

QUIC bridge for the NetScaler appliance is preferred for the following reasons:

  • No expensive crypto operations.
  • Stateless routing is possible (no 4-tuple based load balancing).

Crypto offload support for QUIC

If a NetScaler appliance is equipped with the SSL hardware chips, it does the crypto acceleration transparently and accelerates QUIC transactions. This acceleration is done by offloading crypto processing from software to hardware. No explicit configuration is needed for this support. The acceleration of QUIC transactions is supported in the NetScaler appliances with Intel Coleto hardware.