{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,27]],"date-time":"2026-04-27T16:36:14Z","timestamp":1777307774628,"version":"3.51.4"},"reference-count":68,"publisher":"Association for Computing Machinery (ACM)","issue":"CoNEXT4","funder":[{"DOI":"10.13039\/501100002347","name":"Bundesministerium f\u00fcr Bildung und Forschung","doi-asserted-by":"publisher","award":["16KIS2332K"],"award-info":[{"award-number":["16KIS2332K"]}],"id":[{"id":"10.13039\/501100002347","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002347","name":"Bundesministerium f\u00fcr Bildung und Forschung","doi-asserted-by":"publisher","award":["16KIS2333"],"award-info":[{"award-number":["16KIS2333"]}],"id":[{"id":"10.13039\/501100002347","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. ACM Netw."],"published-print":{"date-parts":[[2025,11,24]]},"abstract":"<jats:p>QUIC experiences a rapid adoption since its standardization in 2021, and hypergiants configure their infrastructure to optimize for QUIC performance. In this paper, we introduce a passive measurement method to study both the progressive rollout and individual hypergiant configurations during the last five years. By analyzing backscatter traffic of the UCSD network telescope, we are able to make the following observations. First, Meta, Google, and Cloudflare configure significantly different maximal retransmission numbers and timeouts. Second, we can identify different off-net deployments of hypergiants, using packet features, such as QUIC connection IDs, packet coalescence, and packet lengths. Third, we observe changing hypergiant deployment configurations during our different measurement periods. Fourth, connection IDs can allow further insights into load balancer deployments, such as the number of servers. We bolster our results using two orthogonal measurements: passive recording of QUIC flows and active probing.<\/jats:p>","DOI":"10.1145\/3768988","type":"journal-article","created":{"date-parts":[[2025,11,25]],"date-time":"2025-11-25T17:09:56Z","timestamp":1764090596000},"page":"1-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Waiting for QUIC: Passive Measurements to Understand QUIC Deployments"],"prefix":"10.1145","volume":"3","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1523-2069","authenticated-orcid":false,"given":"Jonas","family":"M\u00fccke","sequence":"first","affiliation":[{"name":"TU Dresden, Dresden, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6308-5502","authenticated-orcid":false,"given":"Marcin","family":"Nawrocki","sequence":"additional","affiliation":[{"name":"NETSCOUT, Westford, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1676-8108","authenticated-orcid":false,"given":"Raphael","family":"Hiesgen","sequence":"additional","affiliation":[{"name":"HAW Hamburg, Hamburg, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9375-3113","authenticated-orcid":false,"given":"Patrick","family":"Sattler","sequence":"additional","affiliation":[{"name":"Technical University of Munich, Munich, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2918-016X","authenticated-orcid":false,"given":"Johannes","family":"Zirngibl","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Informatics, Saarbr\u00fccken, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2347-1839","authenticated-orcid":false,"given":"Georg","family":"Carle","sequence":"additional","affiliation":[{"name":"Technical University of Munich, Munich, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0879-0054","authenticated-orcid":false,"given":"Jan","family":"Luxemburk","sequence":"additional","affiliation":[{"name":"FIT CTU, Prague, Czech Republic and CESNET, Prague, Czech Republic"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0956-7885","authenticated-orcid":false,"given":"Thomas C.","family":"Schmidt","sequence":"additional","affiliation":[{"name":"HAW Hamburg, Hamburg, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3825-2807","authenticated-orcid":false,"given":"Matthias","family":"W\u00e4hlisch","sequence":"additional","affiliation":[{"name":"TU Dresden, Dresden, Germany"}]}],"member":"320","published-online":{"date-parts":[[2025,11,25]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068870"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3447382"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177100"},{"key":"e_1_2_1_4_1","volume-title":"17th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2020","author":"Barbette Tom","year":"2020","unstructured":"Tom Barbette, Chen Tang, Haoran Yao, Dejan Kostic, Gerald Q. Maguire Jr., Panagiotis Papadimitratos, and Marco Chiesa. 2020. A High-Speed Load-Balancer Design with Guaranteed Per-Connection-Consistency. In 17th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2020, Santa Clara, CA, USA, February 25-27, 2020, Ranjita Bhagwan and George Porter (Eds.). USENIX Association, 667-683. https:\/\/www.usenix.org\/conference\/nsdi20\/presentation\/barbette"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","unstructured":"M. Bishop. 2022. HTTP\/3. RFC 9114. IETF. https:\/\/doi.org\/10.17487\/RFC9114","DOI":"10.17487\/RFC9114"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3211852.3211857"},{"key":"e_1_2_1_7_1","volume-title":"The UCSD Network Telescope. Website. https:\/\/www.caida.org\/projects\/network_telescope\/ Last Access","author":"CAIDA.","year":"2025","unstructured":"CAIDA. 2012. The UCSD Network Telescope. Website. https:\/\/www.caida.org\/projects\/network_telescope\/ Last Access: May 2025."},{"key":"e_1_2_1_8_1","volume-title":"https:\/\/www.caida.org\/projects\/spoofer\/ Last Access","author":"Spoofer Project CAIDA.","year":"2025","unstructured":"CAIDA. 2022. Spoofer Project. https:\/\/www.caida.org\/projects\/spoofer\/ Last Access: June 2025."},{"key":"e_1_2_1_9_1","volume-title":"ipfixprobe - IPFIX flow exporter with DPDK support. GitHub Repository. https:\/\/github.com\/CESNET\/ipfixprobe Last Access","author":"CESNET.","year":"2025","unstructured":"CESNET. 2019. ipfixprobe - IPFIX flow exporter with DPDK support. GitHub Repository. https:\/\/github.com\/CESNET\/ipfixprobe Last Access: September 2025."},{"key":"e_1_2_1_10_1","volume-title":"https:\/\/github.com\/cloudflare\/quiche Last Access","author":"Github Repository QUICHE.","year":"2025","unstructured":"Cloudflare. 2018. QUICHE. Github Repository. https:\/\/github.com\/cloudflare\/quiche Last Access: Jun 2025."},{"key":"e_1_2_1_11_1","volume-title":"Cloudflare Radar: Adoption & Usage. https:\/\/radar.cloudflare.com\/adoption-and-usage?dateRange=52w Last Access","year":"2025","unstructured":"Cloudflare. 2025a. Cloudflare Radar: Adoption & Usage. https:\/\/radar.cloudflare.com\/adoption-and-usage?dateRange=52w Last Access: June 2025."},{"key":"e_1_2_1_12_1","volume-title":"UDP Graceful Restart Marshal. GitHub Repository. https:\/\/github.com\/cloudflare\/udpgrm\/tree\/main Last Access","year":"2025","unstructured":"Cloudflare. 2025b. UDP Graceful Restart Marshal. GitHub Repository. https:\/\/github.com\/cloudflare\/udpgrm\/tree\/main Last Access: June 2025."},{"key":"e_1_2_1_13_1","volume-title":"https:\/\/gitlab.com\/mcollins_at_isi\/acknowledged_scanners Last Access","author":"Collins Michael","year":"2025","unstructured":"Michael Collins. 2021. Acknowledged Scanners. GitLab Repository. https:\/\/gitlab.com\/mcollins_at_isi\/acknowledged_scanners Last Access: May 2025."},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2017.44"},{"key":"e_1_2_1_15_1","volume-title":"Re: Scanning the Internet for Vulnerabilities. https:\/\/seclists.org\/nanog\/2022\/Jun\/269 Last Access","author":"DeLong Owen","year":"2022","unstructured":"Owen DeLong. 2022. Re: Scanning the Internet for Vulnerabilities. https:\/\/seclists.org\/nanog\/2022\/Jun\/269 Last Access: June 2025."},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3503158"},{"key":"e_1_2_1_17_1","unstructured":"Martin Duke Nick Banks and Christian Huitema. 2024. QUIC-LB: Generating Routable QUIC Connection IDs. Internet-Draft - work in progress 18. IETF. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-quic-load-balancers-18"},{"key":"e_1_2_1_18_1","unstructured":"Martin Duke Nick Banks and Christian Huitema. 2025. QUIC-LB: Generating Routable QUIC Connection IDs. Internet-Draft - work in progress 21. IETF. https:\/\/datatracker.ietf.org\/doc\/html\/draft-ietf-quic-load-balancers-21"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3646547.3689012"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","unstructured":"W. Eddy. 2007. TCP SYN Flooding Attacks and Common Mitigations. RFC 4987. IETF. https:\/\/doi.org\/10.17487\/RFC4987","DOI":"10.17487\/RFC4987"},{"key":"e_1_2_1_21_1","first-page":"523","volume-title":"Proc. of USENIX NSDI. USENIX Association","author":"Eisenbud Daniel E.","year":"2016","unstructured":"Daniel E. Eisenbud, Cheng Yi, Carlo Contavalli, Cody Smith, Roman Kononov, Eric Mann-Hielscher, Ardas Cilingiroglu, Bin Cheyney, Wentao Shang, and Jinnah Dylan Hosein. 2016. Maglev: A Fast and Reliable Software Network Load Balancer. In Proc. of USENIX NSDI. USENIX Association, Santa Clara, CA, 523-535. https:\/\/www.usenix.org\/conference\/nsdi16\/technical-sessions\/presentation\/eisenbud"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472922"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472928"},{"key":"e_1_2_1_24_1","volume-title":"https:\/\/github.com\/google\/quiche Last Access","author":"GitHub Repository QUICHE.","year":"2025","unstructured":"Google. 2021. QUICHE. GitHub Repository. https:\/\/github.com\/google\/quiche Last Access: Jul 2025."},{"key":"e_1_2_1_25_1","volume-title":"Guilmette et al","author":"Ronald","year":"2022","unstructured":"Ronald F. Guilmette et al., 2022. Scanning the Internet for Vulnerabilities. https:\/\/seclists.org\/nanog\/2022\/Jun\/250 Last Access: June 2025."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3646547.3688451"},{"key":"e_1_2_1_27_1","first-page":"431","volume-title":"Proc. of USENIX Security. USENIX Association","author":"Hiesgen Raphael","year":"2022","unstructured":"Raphael Hiesgen, Marcin Nawrocki, Alistair King, Alberto Dainotti, Thomas C. Schmidt, and Matthias W\u00e4hlisch. 2022. Spoki: Unveiling a New Wave of Scanners through a Reactive Network Telescope. In Proc. of USENIX Security. USENIX Association, Berkeley, CA, USA, 431-448. https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/hiesgen"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3656300"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-016-0030-7"},{"key":"e_1_2_1_30_1","volume-title":"mvfst. GitHub Repository. https:\/\/github.com\/facebookincubator\/mvfst Last Access","author":"Incubator Facebook","year":"2025","unstructured":"Facebook Incubator. 2019a. mvfst. GitHub Repository. https:\/\/github.com\/facebookincubator\/mvfst Last Access: June 2025."},{"key":"e_1_2_1_31_1","volume-title":"mvfst - encodeConnectionId function. GitHub Repository. https:\/\/github.com\/facebookincubator\/mvfst\/blob\/9603981b74a7d28004331e6fd6dbf2882ad2c291\/quic\/codec\/DefaultConnectionIdAlgo.cpp#L323 Last Access","author":"Incubator Facebook","year":"2025","unstructured":"Facebook Incubator. 2019b. mvfst - encodeConnectionId function. GitHub Repository. https:\/\/github.com\/facebookincubator\/mvfst\/blob\/9603981b74a7d28004331e6fd6dbf2882ad2c291\/quic\/codec\/DefaultConnectionIdAlgo.cpp#L323 Last Access: June 2025."},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC9000"},{"key":"e_1_2_1_33_1","volume-title":"QUIC on the Highway:Evaluating Performance on High-rate Links. In In Proc. of IFIP Networking Conference (IFIP Networking). IFIP","author":"Jaeger Benedikt","year":"2023","unstructured":"Benedikt Jaeger, Johannes Zirngibl, Marcel Kempf, Kevin Ploch, and Georg Carle. 2023. QUIC on the Highway:Evaluating Performance on High-rate Links. In In Proc. of IFIP Networking Conference (IFIP Networking). IFIP, Barcelona, Spain."},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298321"},{"key":"e_1_2_1_35_1","volume-title":"Get a head start with QUIC. Blog. https:\/\/blog.cloudflare.com\/head-start-with-quic\/ Last Access","author":"Jones Nick","year":"2025","unstructured":"Nick Jones. 2018. Get a head start with QUIC. Blog. https:\/\/blog.cloudflare.com\/head-start-with-quic\/ Last Access: May 2025."},{"key":"e_1_2_1_36_1","volume-title":"Re: Why isn't QUIC growing?, https:\/\/mailarchive.ietf.org\/arch\/msg\/quic\/SqMCCWSyVeI46Exu4I-MCAAgg_w\/ Last Access","author":"Joras Matt","year":"2024","unstructured":"Matt Joras. 2024. Re: Why isn't QUIC growing?, https:\/\/mailarchive.ietf.org\/arch\/msg\/quic\/SqMCCWSyVeI46Exu4I-MCAAgg_w\/ Last Access: June 2025."},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN64029.2025.00056"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472891"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851194"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.23919\/TMA58422.2023.10199052"},{"key":"e_1_2_1_41_1","unstructured":"Gordon Fyodor Lyon. 2009. Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning. Nmap Project Chapter Legal Issues."},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3405796.3405830"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3718958.3754347"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3405796.3405828"},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1016\/J.COMNET.2008.05.010"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","unstructured":"A. Minaburo and L. Toutain. 2023. A YANG Data Model for Static Context Header Compression (SCHC). RFC 9363. IETF. https:\/\/doi.org\/10.17487\/RFC9363","DOI":"10.17487\/RFC9363"},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3646547.3689022"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487840"},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3555050.3569123"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3284850.3284852"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987474"},{"key":"e_1_2_1_52_1","first-page":"255","article-title":"A First Look at QUIC in the Wild. In Passive and Active Measurement (LNCS, Vol. 10771). Springer Nature","author":"R\u00fcth Jan","year":"2018","unstructured":"Jan R\u00fcth, Ingmar Poese, Christoph Dietzel, and Oliver Hohlfeld. 2018. A First Look at QUIC in the Wild. In Passive and Active Measurement (LNCS, Vol. 10771). Springer Nature, Switzerland, 255-268.","journal-title":"Switzerland"},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103123"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","unstructured":"D. Schinazi and E. Rescorla. 2023. Compatible Version Negotiation for QUIC. RFC 9368. IETF. https:\/\/doi.org\/10.17487\/RFC9368","DOI":"10.17487\/RFC9368"},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3405796.3405826"},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502818"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3134562"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423646"},{"key":"e_1_2_1_59_1","unstructured":"Terin Stock. 2020. High Availability Load Balancers with Maglev. https:\/\/blog.cloudflare.com\/high-availability-load-balancers-with-maglev\/"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.14279\/tuj.eceasst.80.1172.1077"},{"key":"e_1_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2018.8647128"},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278535"},{"key":"e_1_2_1_63_1","volume-title":"Proc","author":"Vermeulen Kevin","unstructured":"Kevin Vermeulen, Justin P. Rohrer, Robert Beverly, Olivier Fourmaux, and Timur Friedman. 2020. Diamond-Miner: Comprehensive Discovery of the Internet's Topology Diamonds. In Proc. of USENIX NSDI. USENIX Association, USA, 479-494."},{"key":"e_1_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3340301.3341123"},{"key":"e_1_2_1_65_1","volume-title":"Acceptable Use Policy for Xfinity Internet. https:\/\/www.xfinity.com\/corporate\/customers\/policies\/highspeedinternetaup Last Access","year":"2025","unstructured":"Xfinity. 2021. Acceptable Use Policy for Xfinity Internet. https:\/\/www.xfinity.com\/corporate\/customers\/policies\/highspeedinternetaup Last Access: May 2025."},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3122940"},{"key":"e_1_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487826"},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-56252-5_13"}],"container-title":["Proceedings of the ACM on Networking"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3768988","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,27]],"date-time":"2026-04-27T15:45:19Z","timestamp":1777304719000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3768988"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,24]]},"references-count":68,"journal-issue":{"issue":"CoNEXT4","published-print":{"date-parts":[[2025,11,24]]}},"alternative-id":["10.1145\/3768988"],"URL":"https:\/\/doi.org\/10.1145\/3768988","relation":{},"ISSN":["2834-5509"],"issn-type":[{"value":"2834-5509","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,24]]},"assertion":[{"value":"2025-11-25","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}