Conformance & testing

Conformance matrix

LiteSpeed parity and the clean-room boundary

Differential testing against a live LiteSpeed reached 11/11 on ETag format, .html→PHP dispatch, LSAPI encoding and rewrite-flag semantics before the apparatus was retired: httpjet is now the same-config drop-in serving the live tree. The authoritative reference for LiteSpeed's exact behavior was the GPL OpenLiteSpeed source, read to extract behavior and then reimplemented from scratch — no OpenLiteSpeed code was copied. httpjet itself is licensed GPL-3.0-only, with no paid edition or license key, and is independent of and not endorsed by LiteSpeed Technologies.

ETag: "4096-1718800000-1572934;;;"     # size-mtime-inode, three trailing semicolons — strict validators compare bytes

Suffix routing and the .html→PHP decision follow OpenLiteSpeed's order, including the source-disclosure guard: a script whose handler has no pool is a 503 and never falls through to static.

Test layers

The last full runs: the whole workspace suite green at the 0.1.5 release (3,019 passed / 0 failed); 2,028 at 0.0.5. A failure is a regression, not "pre-existing." Timing-flaky meta-assertions were deleted in June 2026 so the concurrency tests are deterministic.

flowchart TB
  classDef l1 fill:#0e1424,stroke:#22d3ee,color:#e8ecf6
  classDef l2 fill:#13203a,stroke:#818cf8,color:#fff
  classDef l3 fill:#1a1f33,stroke:#fbbf73,color:#e8ecf6
  classDef l4 fill:#0f2a24,stroke:#34d399,color:#fff
  U["1 · Unit & Property Tests (~3,019 tests across 20 crates)<br/>config parsing · HPACK · rewrite DFA · cache keys · jail invariants · ETag parity"]:::l1
  F["2 · Bounded Corpus & Fuzzing (8 cargo-fuzz targets + 2,333 H1 corpus cases)<br/>h1_request_framing · hpack_decode · qpack_decode · lsapi_resp_header · proxy_protocol_parse"]:::l2
  I["3 · Protocol & Interop Suites (CI per push)<br/>h2spec 2.6.0 (146/146 over TLS) · aioquic 1.3.0 H3 · Pebble ACME · OTel protobuf trace verification"]:::l3
  G["4 · Live Loopback Deploy Gates (pre/post-cutover)<br/>cache_xurl · cache_scheme · cache_xhost · cache_private · cache_persist · cache_sie · fast_memo_parity"]:::l4
  U --> F --> I --> G

CI and interoperability jobs

• Ubuntu 24.04 x86_64: formatting, default and profiling builds, strict example-config validation, dependency-license and DCO checks, workspace tests, H1 corpus replay.
• Ubuntu 22.04 x86_64 and Ubuntu 24.04 ARM64: compile all features, replay H1, run the real io_uring UDS H1/H2 test — selected compatibility probes on GitHub-hosted runners, not a full kernel matrix.
• Protocol interoperability: an OTel-enabled binary, h2spec 2.6.0 over TLS against a fresh example configuration (archive SHA-256 pinned, exactly 146/146 required), H1 WebSocket / H2 dispatch tracing, and the aioquic 1.3.0 QUIC test in an isolated venv.
• Dependency advisories: a daily job fails on any RustSec finding and on a newer compatible transport-critical crate (quinn, rustls, aws-lc-rs, tokio, httparse, io-uring, zstd, brotli, h2, hyper, http, mio, socket2, openssl, bcrypt, libc).
• Nightly/manual fuzz: all eight parser targets with bounded time, input size, memory and artifact retention.

cargo test --locked -p httpjet --test h1_corpus -- --nocapture
cargo build --locked -p httpjet --features otel --bin httpjet
python3 -B scripts/ci-h2spec.py --binary target/debug/httpjet --h2spec h2spec
cargo test --locked -p httpjet --features otel traced_fast_and_bridged_requests
cargo test --locked -p httpjet --features otel traced_quic_roundtrip -- --ignored

Hosted execution evidence is tracked separately from local runs; a runner label being available is not proof a job executed.

Fuzzing

Eight cargo-fuzz targets share one invariant (never panic, never allocate unboundedly, agree with the reference decoder where one exists): h1_chunked_decode, h1_request_framing, hpack_decode, hpack_roundtrip, lsapi_resp_header, and — added in the 2026-10-06 review — qpack_decode, proxy_protocol_parse and lscache_control. Short ASan smoke runs of the original five covered 164,558 chunked, 739,373 framing, 452,899 HPACK-decode, 58,082 HPACK-roundtrip and 438,582 LSAPI-header executions without a finding.

FUZZ_TOOLCHAIN=nightly FUZZ_SECONDS=5 bash scripts/fuzz-bounded.sh h1_request_framing
python3 scripts/fuzz-seeds.py     # regenerate the shared seed corpus

Production gates

Beyond the suites, a deploy runs the cache-correctness gates (cross-URL, cross-scheme, cross-host, private tier, persistence), the fast-memo parity gate, the capsule purge gate and the h2spec gate. They are described with their failure classes on Page cache → deploy gates and Operations → deploy.