SPDY

From HandWiki
Short description: Google's experimental binary encoding of HTTP

SPDY (pronounced "speedy")[1] is an obsolete open-specification communication protocol developed for transporting web content.[1] SPDY became the basis for HTTP/2 specification. However, HTTP/2 diverged from SPDY and eventually HTTP/2 subsumed all usecases of SPDY.[2] After HTTP/2 was ratified as a standard, major implementers, including Google, Mozilla, and Apple, deprecated SPDY in favor of HTTP/2. Since 2021, no modern browser supports SPDY.

Google announced SPDY in late 2009 and deployed in 2010. SPDY manipulates HTTP traffic, with particular goals of reducing web page load latency and improving web security. SPDY achieves reduced latency through compression, multiplexing, and prioritization,[1] although this depends on a combination of network and website deployment conditions.[3][4][5] The name "SPDY" is a trademark[6] of Google and is not an acronym.[7]

History

HTTP/2 was first discussed when it became apparent that SPDY was gaining traction with implementers (like Mozilla and nginx), and was showing significant improvements over HTTP/1.x. After a call for proposals and a selection process, SPDY was chosen as the basis for HTTP/2. Since then, there have been a number of changes, based on discussion in the Working Group and feedback from implementers.[2]

(As of July 2012), the group developing SPDY stated publicly that it was working toward standardisation (available as an Internet Draft).[8] The first draft of HTTP/2 used SPDY as the working base for its specification draft and editing.[9] The IETF working group for HTTPbis has released the draft of HTTP/2.[10] SPDY (draft-mbelshe-httpbis-spdy-00) was chosen as the starting point.[11][12]

Throughout the process, the core developers of SPDY have been involved in the development of HTTP/2, including both Mike Belshe and Roberto Peon.

Chromium,[13] Mozilla Firefox,[14] Opera,[15] Amazon Silk, Internet Explorer,[16] and Safari[17] expressed support for SPDY at the time.

In February 2015, Google announced that following ratification of the HTTP/2 standard, support for SPDY would be deprecated, and that support for SPDY would be withdrawn.[18] On May 15, 2015, HTTP/2 was officially ratified as RFC 7540.

On February 11, 2016, Google announced that Chrome would no longer support SPDY after May 15, 2016, the one-year anniversary of RFC 7540 which standardized HTTP/2.[19]

On January 25, 2019, Apple announced that SPDY would be deprecated in favor of HTTP/2, and would be removed in future releases.[20]

Google removed SPDY support in Google Chrome 51 which was released in 2016.[21] Mozilla removed it in Firefox 50.[22] Apple has deprecated the technology in macOS 10.14.4 and iOS 12.2.[20]

Protocol versions

SPDY is a versioned protocol. SPDY control frames contain 15 dedicated bits to indicate the version of protocol used for the current session.[23]

  • Version 1: version 1 of the SPDY protocol is not used anymore.[23]
  • Version 2: soon to be discontinued. Nginx supports SPDY/2 in versions prior to 1.5.10.[24] Firefox 28 and recent versions of Chrome drop support for it.[25][26] OpenLiteSpeed 1.1 and up support SPDY/2.[27]
  • Version 3: SPDY v3 introduced support for flow control, updated the compression dictionary, and removed wasted space from certain frames, along with other minor bug fixes.[28] Firefox supports SPDY v3 in Firefox 15.[29] OpenLiteSpeed 1.1 and up support SPDY/3.[27]
  • Version 3.1: SPDY v3.1 introduced support for session-layer flow control, and removed the CREDENTIALS frame (and associated error codes).[30] Firefox 27 has added SPDY 3.1 support.[31] OpenLiteSpeed 1.2.7 introduces SPDY/3.1 support.[32] Nginx 1.5.10 supports SPDY/3.1.[33] F5 BIGIP 11.6 supports SPDY/3.1.[34]
  • Version 4.0: SPDY v4 alpha3 is more closely aligned with the HTTP/2 draft; it has a new stream flow control and error codes unified with the HTTP/2 draft.[35]

Design

The goal of SPDY is to reduce web page load time.[36] This is achieved by prioritizing and multiplexing the transfer of web page subresources so that only one connection per client is required.[1][37] TLS encryption is nearly ubiquitous in SPDY implementations, and transmission headers are gzip- or DEFLATE-compressed by design[28] (in contrast to HTTP, where the headers are sent as human-readable text). Moreover, servers may hint or even push content instead of awaiting individual requests for each resource of a web page.[38]

SPDY requires the use of SSL/TLS (with TLS extension ALPN) for security but it also supports operation over plain TCP. The requirement for SSL is for security and to avoid incompatibility when communication is across a proxy.

Relation to HTTP

SPDY does not replace HTTP; it modifies the way HTTP requests and responses are sent over the wire.[1] This means that all existing server-side applications can be used without modification if a SPDY-compatible translation layer is put in place.

SPDY is effectively a tunnel for the HTTP and HTTPS protocols. When sent over SPDY, HTTP requests are processed, tokenized, simplified and compressed. For example, each SPDY endpoint keeps track of which headers have been sent in past requests and can avoid resending the headers that have not changed; those that must be sent are compressed.

Protocol support

For use within HTTPS, SPDY requires the TLS extension Next Protocol Negotiation (NPN)[39] or Application-Layer Protocol Negotiation (ALPN)[40] thus browser and server support depends on the HTTPS library.

OpenSSL 1.0.1 or greater introduces NPN.[41] Patches to add NPN support have also been written for NSS and TLSLite.[42]

Security Support Provider Interface (SSPI) from Microsoft have not implemented the NPN extension to its TLS implementation. This has prevented SPDY inclusion in the latest .NET Framework versions. Since SPDY specification is being refined and HTTP/2 is expected to include SPDY implementation one could expect Microsoft to release support after HTTP/2 is finalized.

Client (browser) support and usage

  • Google Chrome/Chromium.[43][44] SPDY sessions in Chrome can be inspected via the URI: chrome://net-internals/#events&q=type:SPDY_SESSION%20is:active. There is a command-line switch for Google Chrome (--enable-websocket-over-spdy) which enables an early, experimental implementation of WebSocket over SPDY.[45] SPDY protocol functionality can be (de)activated by toggling "Enable SPDY/4" setting on local chrome://flags page. Chromium is expected to remove support for SPDY and Next Protocol Negotiation in early 2016, in favor of HTTP/2 and ALPN.[46] Starting with version 40.x in Feb 2015 Chrome has already dropped support for SPDY/3 and only supports SPDY/3.1 going forward. This has caused Apache websites to be without SPDY support when visited from Google Chrome.[47]
  • Firefox supports SPDY 2 from version 11, and default-enabled since 13 and later. (Also SeaMonkey version 2.8+.) SPDY protocol functionality can be (de)activated by toggling the network.http.spdy.enabled variable in about:config.[14] Firefox 15 added support for SPDY 3.[29] Firefox 27 has added SPDY 3.1 support.[31] Firefox 28 has removed support of SPDY 2.[25] about:networking (or the HTTP/2 and SPDY indicator add-on)[48] shows if a website uses SPDY.
  • Opera browser added support for SPDY as of version 12.10.[49]
  • Internet Explorer 11 added support for SPDY version 3,[50][51] but not for the Windows 7 version.[52] A problem experienced by some users of Windows 8.1 and Internet Explorer 11 is that on initial loading, Google says "Page not found" but on reloading, it is fine. One fix for this is to disable SPDY/3 in Internet Options > Advanced.[53] After version 11, IE will drop the support of SPDY, as it will adopt HTTP/2.[54]
  • Amazon's Silk browser for the Kindle Fire uses the SPDY protocol to communicate with their EC2 service for Web pages rendering.[55]
  • Safari 8 and third-party applications in OS X 10.10 and iOS 8 adds support for SPDY 2, 3 and 3.1.[56]

Server support and usage

(As of May 2021), approximately 0.1% of all websites support SPDY,[57] in part due to transition to HTTP/2. In 2016, NGINX and Apache[58] were the major providers of SPDY traffic.[59] In 2015, NGINX 1.9.5 dropped SPDY support in favor of HTTP/2.[60]

Some Google services (e.g. Google Search, Gmail, and other SSL-enabled services) use SPDY when available.[61] Google's ads are also served from SPDY-enabled servers.[62]

A brief history of SPDY support amongst major web players:

  • In November 2009, Google announced SPDY as an internal project to increase the speed of the web.[63]
  • In September 2010, Google released SPDY in Chrome 6 on all platforms.[64]
  • In January 2011, Google deployed SPDY across all Google services.[65]
  • In March 2012, Twitter enabled SPDY on its servers, at the time making it the second largest site known to deploy SPDY.[66]
  • In March 2012, the open source Jetty Web Server announced support for SPDY in version 7.6.2 and 8.1.2,[67] while other open source projects were working on implementing support for SPDY, including Node.js,[68][69] Apache (mod_spdy),[70] curl,[71] and Nginx.[72]
  • In April 2012 Google started providing SPDY packages for Apache servers which led some smaller websites to provide SPDY support.[73]
  • In May 2012 F5 Networks announced support for SPDY in its BIG-IP application delivery controllers.[74]
  • In June 2012 Nginx open source web server announced support for SPDY.[75]
  • In July 2012 Facebook announced implementation plans for SPDY.[76] By March 2013 SPDY was implemented by some of their public web servers.[77]
  • In August 2012 WordPress.com announced support for SPDY (using Nginx) across all their hosted blogs.[78]
  • In June 2013, LiteSpeed Technologies announced support for SPDY/2 and SPDY/3 on OpenLiteSpeed, their open source HTTP server.[27] Support for SPDY/3.1 was announced November 2013.[32]
  • In January 2014, Synology announced SPDY is included in the new DSM 5.0.[79]
  • In February 2014, CloudFlare using nginx announced automatic support for SPDY v3.1 for all customers with SSL/TLS certificates.[80]
  • In May 2014, MaxCDN using nginx announced support for SPDY v3.1 via customers' Pull Zone settings and their API.[81]
  • In October 2014, Yahoo shows support of SPDY on the Yahoo Homepage — www.yahoo.com
  • In September 2015, the latest version of the Nginx web server dropped SPDY support in favour of HTTP/2[60]
  • In May 2016, CloudFlare releases patches to Nginx web server, the patches supports HTTP/2 and SPDY simultaneously.[82]

According to W3Techs, (As of May 2021), most SPDY-enabled websites use nginx, with the LiteSpeed web server coming second.[59]

See also

References

  1. 1.0 1.1 1.2 1.3 1.4 "SPDY: An experimental protocol for a faster web". Chromium Developer Documentation. https://dev.chromium.org/spdy/spdy-whitepaper. 
  2. 2.0 2.1 "HTTP/2 Frequently Asked Questions". https://http2.github.io/faq/#whats-the-relationship-with-spdy. 
  3. Elkhatib, Yehia; Tyson, Gareth; Welzl, Michael (2014). 2014 IFIP Networking Conference. pp. 1–9. doi:10.1109/IFIPNetworking.2014.6857089. ISBN 978-3-901882-58-6. 
  4. Podjarny, Guy. "Not as SPDY as You Thought". http://www.guypo.com/technical/not-as-spdy-as-you-thought/. 
  5. Abdelsalam, Ahmed; Celandroni, Nedo; Collina, Matteo; Cruickshank, Haitham; Fairhurst, Gorry; Ferro, Erina; Gotta, Alberto; Luglio, Michele et al. (2015-07-01). "A deep analysis on future web technologies and protocols over broadband GEO satellite networks" (in en). International Journal of Satellite Communications and Networking 33 (5): 451–472. doi:10.1002/sat.1120. ISSN 1542-0981. 
  6. "Permissions: Our trademarks". https://www.google.com/permissions/trademark/our-trademarks.html. 
  7. "SPDY frequently asked questions". https://www.chromium.org/spdy/spdy-whitepaper#TOC-SPDY-frequently-asked-questions. "We wanted a name that captures speed. SPDY, pronounced "SPeeDY", captures this and also shows how compression can help improve speed." 
  8. "SPDY Protocol on IETF". //tools.ietf.org/html/draft-mbelshe-httpbis-spdy-00. 
  9. Nottingham, Mark. "First draft of HTTP/2". HTTP Working Group Mailing List. http://lists.w3.org/Archives/Public/ietf-http-wg/2012OctDec/0447.html. 
  10. Nottingham, Mark. "What's next for HTTP". http://www.mnot.net/blog/2012/03/31/whats_next_for_http. 
  11. "Fwd: [new-work WG Review: Hypertext Transfer Protocol Bis (httpbis)"]. http://lists.w3.org/Archives/Public/ietf-http-wg/2012JulSep/1282.html. 
  12. "HTTPbis Working Group Start To Consider HTTP/2.0". InfoQ. 2012-04-28. http://www.infoq.com/news/2012/04/http-next. 
  13. "SPDY on Google servers?". https://groups.google.com/group/spdy-dev/browse_thread/thread/4c2396ecbc36b1c4. 
  14. 14.0 14.1 "Mozilla Bug 528288 - Implement SPDY protocol". https://bugzilla.mozilla.org/show_bug.cgi?id=528288. 
  15. "Opera: Built-in support for the SPDY protocol". http://www.opera.com/press/releases/2012/11/06/. 
  16. "IE11 SPDY/3 confirmed". 2013-06-25. http://microsoft-news.com/webgl-spdy3-new-dev-tools-more-confirmed-for-ie11-in-win-8-1/. 
  17. "Apple — Press Info — Apple Announces OS X Yosemite". 2 June 2014. //www.apple.com/pr/library/2014/06/02Apple-Announces-OS-X-Yosemite.html. 
  18. "Hello HTTP/2, Goodbye SPDY". 9 February 2015. https://blog.chromium.org/2015/02/hello-http2-goodbye-spdy.html. 
  19. Béky, Bence (February 11, 2016). "Transitioning from SPDY to HTTP/2". https://blog.chromium.org/2016/02/transitioning-from-spdy-to-http2.html. 
  20. 20.0 20.1 Marshall, Scott (2019-01-25). "Removing Legacy SPDY Protocol Support". https://webkit.org/blog/8569/removing-legacy-spdy-protocol-support/. 
  21. "Transitioning from SPDY to HTTP/2" (in en). https://blog.chromium.org/2016/02/transitioning-from-spdy-to-http2.html. 
  22. "1287132 - Disable SPDY 3.1". https://bugzilla.mozilla.org/show_bug.cgi?id=1287132. 
  23. 23.0 23.1 SPDY Protocol - Draft 2: "Currently, the only valid string is "spdy/2" (spdy/1 isn't implemented anywhere anymore)".
  24. "Module ngx_http_spdy_module". Nginx.org. http://nginx.org/en/docs/http/ngx_http_spdy_module.html. 
  25. 25.0 25.1 "Firefox Beta Notes — Desktop". 2014-02-06. https://website-archive.mozilla.org/www.mozilla.org/firefox_releasenotes/en-US/firefox/28.0beta/releasenotes/. 
  26. "Issue 303957 - chromium — Make Chrome support only SPDY/3 and above — An open-source project to help move the web forward. - Google Project Hosting". 2013-10-03. https://code.google.com/p/chromium/issues/detail?id=303957. 
  27. 27.0 27.1 27.2 OpenLiteSpeed 1.1 (With SPDY!) Retrieved 2013-08-12.
  28. 28.0 28.1 "SPDY Protocol — Draft 3". https://www.chromium.org/spdy/spdy-protocol/spdy-protocol-draft3. 
  29. 29.0 29.1 "Firefox 15 — Release Notes". https://website-archive.mozilla.org/www.mozilla.org/firefox_releasenotes/en-US/firefox/15.0/releasenotes/. 
  30. "SPDY Protocol — Draft 3.1". https://www.chromium.org/spdy/spdy-protocol/spdy-protocol-draft3-1. 
  31. 31.0 31.1 "Firefox Notes Desktop". 2014-02-04. https://website-archive.mozilla.org/www.mozilla.org/firefox_releasenotes/en-US/firefox/27.0/releasenotes/. 
  32. 32.0 32.1 OpenLiteSpeed 1st Web Server to Support SPDY/3.1! Retrieved 2014-1-10.
  33. NGINX Announces Support for SPDY/3.1 Retrieved 2014-02-04.
  34. F5 Bigip 11.6.0 Release Notes Retrieved 2015-03-10.
  35. "Upcoming SPDY/4 changes to bring it more in sync with the HTTP/2 draft". https://groups.google.com/d/topic/spdy-dev/EWEEWSYtlhc/discussion. 
  36. "A 2x Faster Web". Official Google Chromium Blog. 2009-11-11. https://blog.chromium.org/2009/11/2x-faster-web.html. 
  37. Iljitsch van Beijnum (2009-11-12). "SPDY: Google wants to speed up the web by ditching HTTP". Ars Technica. https://arstechnica.com/web/news/2009/11/spdy-google-wants-to-speed-up-the-web-by-ditching-http.ars. 
  38. Mirko Lindner (13 November 2009). "Google stellt HTTP-Alternative SPDY vor" (in de). http://www.pro-linux.de/news/2009/14950.html. 
  39. NPN protocol and explanation about its need to tunnel SPDY over HTTPS.
  40. "ImperialViolet - NPN and ALPN". https://www.imperialviolet.org/2013/03/20/alpn.html. 
  41. Openssl 1.0.1 changelog.
  42. TLS Next Protocol Negotiation. Section: Implementations .
  43. Chromium SPDY client implementation.
  44. Chromium: SPDY proxy examples .
  45. List of Chromium Command Line Switches.
  46. "Hello HTTP/2, Goodbye SPDY". Chromium Blog. February 9, 2015. https://blog.chromium.org/2015/02/hello-http2-goodbye-spdy.html. 
  47. "Google Groups". https://groups.google.com/forum/#!topic/mod-spdy-discuss/FPEj0zG5I0Y. 
  48. "HTTP/2 and SPDY indicator". Add-ons for Firefox. Mozilla. 2014-11-26. https://addons.mozilla.org/en-US/firefox/addon/spdy-indicator/. 
  49. David Honneffer, Documentation Specialist. "Opera: Opera 12.10 Changelog". http://www.opera.com/docs/changelogs/unified/1210/. 
  50. "WebGL, SPDY/3, New Dev Tools, & More Confirmed For IE11 In Win 8.1". Microsoft News. http://microsoft-news.com/webgl-spdy3-new-dev-tools-more-confirmed-for-ie11-in-win-8-1/. 
  51. "IE11 Changes". Microsoft. http://blogs.msdn.com/b/ieinternals/archive/2013/09/24/internet-explorer-11-changelist-change-log.aspx. 
  52. "Microsoft Releases Internet Explorer 11 for Windows 7". 2013-11-07. http://winsupersite.com/windows-7/microsoft-releases-internet-explorer-11-windows-7. 
  53. "Google not loading first time in IE11 via a web proxy on Windows 8.1? Turn off SPDY support. | The Angry Technician". Angrytechnician.wordpress.com. 2014-01-16. https://angrytechnician.wordpress.com/2014/01/16/google-not-loading-first-time-in-ie11-via-a-web-proxy-on-windows-8-1-turn-off-spdy-support/#more-4479. 
  54. "HTTP/2: The Long-Awaited Sequel". Microsoft. October 8, 2014. http://blogs.msdn.com/b/ie/archive/2014/10/08/http-2-the-long-awaited-sequel.aspx. 
  55. Ryan Paul (28 September 2011). "Amazon's Silk Web browser adds new twist to old idea". https://arstechnica.com/gadgets/news/2011/09/amazons-silk-web-browser-adds-new-twist-to-old-idea.ars. 
  56. "What's New in Foundation Networking". Apple inc.. http://devstreaming.apple.com/videos/wwdc/2014/707xx1o5tdjnvg9/707/707_whats_new_in_foundation_networking.pdf. 
  57. "Usage of SPDY for websites". http://w3techs.com/technologies/details/ce-spdy/all/all. 
  58. "Usage of web servers for websites". https://w3techs.com/technologies/overview/web_server/all. 
  59. 59.0 59.1 "Distribution of Web Servers among websites that use SPDY". http://w3techs.com/technologies/segmentation/ce-spdy/web_server. 
  60. 60.0 60.1 "HTTP/2 Supported in Open Source NGINX 1.9.5 - NGINX". 22 September 2015. https://www.nginx.com/blog/nginx-1-9-5/. 
  61. spdy-dev mailing list: SPDY on Google servers?.
  62. Google Speeds Up Web-Page Downloads with SPDY Protocol - Cloud Computing - News & Reviews. eWeek.com (2011-06-20). Retrieved on 2013-11-21.
  63. "Research Blog: A 2x Faster Web". Research Blog. http://googleresearch.blogspot.com/2009/11/2x-faster-web.html. 
  64. Ido Safruti (2011-06-15). "From Fast to SPDY — Velocity 2011". http://www.slideshare.net/ido-cotendo/from-fast-to-spdy-velocity-2011. 
  65. "Google Groups". https://groups.google.com/forum/#!topic/spdy-dev/TCOW7Lw2scQ. 
  66. Twitter Adopts SPDY .
  67. Jetty Feature SPDY.
  68. "indutny/node-spdy · GitHub". Github.com. https://github.com/indutny/node-spdy. 
  69. Fedor Indutny (2012-01-24). "What the $%@! is SPDY — blog.nodejitsu.com — scaling node.js applications one callback at a time". blog.nodejitsu.com. http://blog.nodejitsu.com/what-is-node-spdy. 
  70. "mod-spdy — Apache SPDY module — Google Project Hosting". https://code.google.com/p/mod-spdy/. 
  71. "libspdy". daniel.haxx.se. 2011-10-18. http://daniel.haxx.se/blog/2011/10/18/libspdy/. 
  72. "@DeviaVir It's going well ;) So far we're on schedule, should hopefully be available by the end of May". Twitter. https://twitter.com/nginxorg/status/192301063934705665. 
  73. "mod_spdy — mod_spdy — Google Developers". https://developers.google.com/speed/spdy/mod_spdy/. 
  74. F5 Helps Organizations Improve User Experience and Simplify Management with First Integrated SPDY Gateway | About F5 | F5 Networks . F5.com (2012-05-08). Retrieved on 2013-11-21.
  75. "Announcing SPDY draft 2 implementation in nginx". Nginx. 2012-06-15. http://mailman.nginx.org/pipermail/nginx-devel/2012-June/002343.html. 
  76. Beaver, Doug. "HTTP2 Expression of Interest". W3C. http://lists.w3.org/Archives/Public/ietf-http-wg/2012JulSep/0251.html. 
  77. Finley, Klint. "Facebook Makes Itself a Bit More SPDY". Wired. https://www.wired.com/wiredenterprise/2013/03/facebook-spdy/. 
  78. "Just enabled #SPDY for all http://WordPress.com/ -hosted sites.". 2012-08-28. https://twitter.com/wordpressdotcom/statuses/238741078172389377. 
  79. [1] DSM 5.0 beta
  80. John Graham-Cumming (2014-02-17). "Staying up to date with the latest protocols: SPDY/3.1 | CloudFlare Blog". Blog.cloudflare.com. http://blog.cloudflare.com/staying-up-to-date-with-the-latest-protocols-spdy-3-1#disqus_thread. 
  81. Justin Dorfman. "Now Serving: SPDY 3.1". blog.maxcdn.com. http://blog.maxcdn.com/now-serving-spdy-3-1/. 
  82. "Open sourcing our NGINX HTTP/2 + SPDY code". 2016-03-13. https://blog.cloudflare.com/open-sourcing-our-nginx-http-2-spdy-code/. 
  83. Ghedini, Alessandro; Lalkaka, Rustam (26 September 2019). "HTTP/3: the past, the present, and the future" (in en). https://blog.cloudflare.com/http3-the-past-present-and-future/. 

External links