Introduce HTTP/3 configuration

.github/workflows/main.yml

@@ -19,14 +19,16 @@ jobs:
       linux_6_1_enabled: false
       linux_6_2_enabled: false
       linux_6_3_enabled: false
-      # linux_6_3_arguments_override: "-Xswiftc -warnings-as-errors --explicit-target-dependency-import-check error -Xswiftc -require-explicit-sendable"
       linux_nightly_next_enabled: true
       linux_nightly_next_arguments_override: "--explicit-target-dependency-import-check error -Xswiftc -require-explicit-sendable"
       linux_nightly_main_arguments_override: "--explicit-target-dependency-import-check error -Xswiftc -require-explicit-sendable"
+      linux_env_vars: '{"SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA":"1"}'
 
   static-sdk:
     name: Static SDK
     uses: apple/swift-nio/.github/workflows/static_sdk.yml@main
+    with:
+      env_vars: '{"SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA":"1"}'
 
   release-builds:
     name: Release builds
@@ -38,3 +40,4 @@ jobs:
       linux_6_2_enabled: false
       linux_6_3_enabled: false
       linux_nightly_next_enabled: true
+      linux_env_vars: '{"SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA":"1"}'

.github/workflows/pull_request.yml

@@ -10,11 +10,12 @@ on:
 jobs:
   soundness:
     name: Soundness
-    uses: swiftlang/github-workflows/.github/workflows/soundness.yml@0.0.11
+    uses: swiftlang/github-workflows/.github/workflows/soundness.yml@497d9ab8410e69981b3b2f28da24cf7bf4b8733d
     with:
       api_breakage_check_container_image: "swiftlang/swift:nightly-6.4.x-noble"
       format_check_container_image: "swiftlang/swift:nightly-6.4.x-noble"
       license_header_check_project_name: "Swift HTTP Server"
+      linux_pre_build_command: "export SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA=1"
 
   unit-tests:
     name: Unit tests
@@ -29,6 +30,7 @@ jobs:
       linux_nightly_next_enabled: true
       linux_nightly_next_arguments_override: "--explicit-target-dependency-import-check error"
       linux_nightly_main_arguments_override: "--explicit-target-dependency-import-check error"
+      linux_env_vars: '{"SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA":"1"}'
 
   cxx-interop:
     name: Cxx interop
@@ -40,10 +42,13 @@ jobs:
       linux_6_2_enabled: false
       linux_6_3_enabled: false
       linux_nightly_next_enabled: true
+      linux_env_vars: '{"SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA":"1"}'
 
   static-sdk:
     name: Static SDK
     uses: apple/swift-nio/.github/workflows/static_sdk.yml@main
+    with:
+      env_vars: '{"SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA":"1"}'
 
   release-builds:
     name: Release builds
@@ -55,3 +60,4 @@ jobs:
       linux_6_2_enabled: false
       linux_6_3_enabled: false
       linux_nightly_next_enabled: false  # should be disabled until next is 6.4
+      linux_env_vars: '{"SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA":"1"}'

Package.swift

@@ -53,9 +53,12 @@ let package = Package(
             .upToNextMinor(from: "0.2.0")
         ),
         .package(url: "https://github.com/apple/swift-distributed-tracing.git", from: "1.4.1"),
-        .package(url: "https://github.com/apple/swift-certificates.git", from: "1.19.1"),
+        .package(url: "https://github.com/apple/swift-certificates.git", from: "1.19.3"),
         .package(url: "https://github.com/apple/swift-log.git", from: "1.14.0"),
         .package(url: "https://github.com/apple/swift-nio.git", from: "2.101.3"),
+        .package(url: "https://github.com/apple/swift-nio-quic.git", .upToNextMinor(from: "0.1.0")),
+        .package(url: "https://github.com/apple/swift-nio-quic-helpers.git", .upToNextMinor(from: "0.1.0")),
+        .package(url: "https://github.com/apple/swift-nio-http3.git", .upToNextMinor(from: "0.1.0")),
         .package(url: "https://github.com/apple/swift-nio-ssl.git", from: "2.37.0"),
         .package(url: "https://github.com/apple/swift-nio-extras.git", from: "1.34.1"),
         .package(url: "https://github.com/apple/swift-nio-http2.git", from: "1.44.0"),
@@ -110,6 +113,9 @@ let package = Package(
                     condition: .when(traits: ["Configuration"])
                 ),
                 .product(name: "NIOExtras", package: "swift-nio-extras"),
+                .product(name: "NIOQUIC", package: "swift-nio-quic"),
+                .product(name: "NIOQUICHelpers", package: "swift-nio-quic-helpers"),
+                .product(name: "NIOHTTP3", package: "swift-nio-http3"),
                 .product(name: "HTTPAPIs", package: "swift-http-api-proposal"),
             ],
             swiftSettings: extraSettings

README.md

@@ -21,3 +21,23 @@ This package offers additional integrations you can enable using
 Available traits:
 - **`Configuration`** (default): Enables initializing `NIOHTTPServerConfiguration` from a `swift-configuration`
   `ConfigProvider`.
+
+## HTTP/3 support
+
+Packages in the dependency tree depend on a beta release of swift-crypto.
+Set the environment variable
+`SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA` to allow swift-certificates
+(in the dependency tree) to adopt swift-crypto beta releases as well.
+
+```
+SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA=1 swift build
+```
+
+To run all unit tests, run
+
+```
+SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA=1 swift test
+```
+
+Use `SWIFT_CERTIFICATES_ALLOW_SWIFT_CRYPTO_BETA=1 xed Package.swift` to open
+the project in Xcode with the environment variable set.

Sources/NIOHTTPServer/Configuration/HTTP3/HTTP3+ConnectionSettings.swift

@@ -0,0 +1,64 @@
+//===----------------------------------------------------------------------===//
+//
+// This source file is part of the Swift HTTP Server open source project
+//
+// Copyright (c) 2026 Apple Inc. and the Swift HTTP Server project authors
+// Licensed under Apache License v2.0
+//
+// See LICENSE.txt for license information
+// See CONTRIBUTORS.txt for the list of Swift HTTP Server project authors
+//
+// SPDX-License-Identifier: Apache-2.0
+//
+//===----------------------------------------------------------------------===//
+
+import HTTP3
+
+@available(anyAppleOS 26.0, *)
+extension NIOHTTPServerConfiguration.HTTP3 {
+    /// HTTP/3 connection settings sent to the peer during connection establishment.
+    public struct ConnectionSettings: Sendable, Hashable {
+        /// The maximum capacity of the QPACK dynamic table.
+        ///
+        /// - SeeAlso: https://www.rfc-editor.org/rfc/rfc9204.html#section-5-2.2.1. Corresponds to
+        ///   `SETTINGS_QPACK_MAX_TABLE_CAPACITY`.
+        public var qpackMaximumTableCapacity: UInt64
+
+        /// The maximum number of streams which may be blocked on QPACK at any one time.
+        ///
+        /// - SeeAlso: https://www.rfc-editor.org/rfc/rfc9204.html#section-5-2.4.1. Corresponds to
+        ///   `SETTINGS_QPACK_BLOCKED_STREAMS`.
+        public var qpackBlockedStreams: UInt64
+
+        /// The maximum size of a field section.
+        ///
+        /// - SeeAlso: https://www.rfc-editor.org/rfc/rfc9114.html#section-7.2.4.1-2.2.1. Corresponds to
+        ///   `SETTINGS_MAX_FIELD_SECTION_SIZE`.
+        public var maximumFieldSectionSize: UInt64?
+
+        /// The default HTTP/3 connection settings configuration.
+        ///
+        /// Uses the following default values:
+        /// - `qpackMaximumTableCapacity`: 0.
+        /// - `qpackBlockedStreams`: 0.
+        /// - `maximumFieldSectionSize`: `nil` (no field section size limit).
+        public static var defaults: Self {
+            Self(
+                qpackMaximumTableCapacity: 0,
+                qpackBlockedStreams: 0,
+                maximumFieldSectionSize: nil
+            )
+        }
+    }
+}
+
+@available(anyAppleOS 26.0, *)
+extension HTTP3.HTTP3Settings {
+    init(_ configuration: NIOHTTPServerConfiguration.HTTP3.ConnectionSettings) {
+        self.init(
+            qpackMaximumTableCapacity: configuration.qpackMaximumTableCapacity,
+            qpackBlockedStreams: configuration.qpackBlockedStreams,
+            maximumFieldSectionSize: configuration.maximumFieldSectionSize
+        )
+    }
+}