- Roadmap Updates for all units (except DST who did it in separate PR) - fixes/updates to the q4 roadmap to make it more consistent - small updates to the roadmap validator TODO: - BI tasks still need some updates but would need to discuss it first with their lead --------- Co-authored-by: kaiserd <1684595+kaiserd@users.noreply.github.com>
2.5 KiB
title, tags, draft, description
| title | tags | draft | description | |||
|---|---|---|---|---|---|---|
| Quic Stabilization and removal of runtime dependencies |
|
false | Stabilize Quic so it can be used effectively by Nimbus and Waku and remove OpenSSL Support |
vac:p2p:ift:2025q4-nimlibp2p-quic
Maintain nim-libp2p through improvements, bug fixes, and user support
Description
In Q3 we discovered critical deficiencies in nim-quic, including runtime instability and excessive memory use during testing. As a result, we cannot safely deploy quic in production. in parallel, we identified OpenSSL as a long-term liability and will migrate to AWS-LC or Boringssl to reduce dependencies and improve maintainability.
Task List
Quic Stabilization
- fully qualified name:
vac:p2p:ift:2025q4-nimlibp2p-quic:stabilization - owner: vlado/rramos
- status: in progress (28%)
- start-date: 2025/10/01
- end-date: 2025/12/31
Description
Resolve runtime crashes, race conditions and excessive memory use in nim-quic. Target outcome is that quic can be enabled and run stably in both nimbus and waku test environments.
Schedule note: Dates reflect quarter bounds; update when actual timing is known.
Deliverables
Replace OpenSSL by AWS-LC / BoringSSL
- fully qualified name:
vac:p2p:ift:2025q4-nimlibp2p-quic:openssl-replacement - owner: rramos
- status: done
- start-date: 2025/10/01
- end-date: 2025/10/15
Description
Replace the openssl dependency in nim-quic and related libraries with BoringSSL or AWS-LC. The goal is to reduce the need of runtime dependencies by statically linking any of these libraries
Schedule note: Dates reflect quarter bounds; update when actual timing is known.
Deliverables
- vacp2p/nim-ngtcp2#22 feat: compile boringssl using assembly files (except windows)
- vacp2p/nim-ngtcp2#21 feat: replace picotls by BoringSSL
- vacp2p/nim-quic#140 feat: use BoringSSL
- vacp2p/nim-libp2p#1782 chore: remove libp2p_quic_support compile flag, and openssl dependency
- vacp2p/nim-libp2p#1761 feat: use BoringSSL for certificate ops