#quic #bevy #networking #bevy-plugin #multiplayer-game #client-certificate #gamedev

bevy_quinnet

Bevy plugin for Client/Server multiplayer games using QUIC

7 releases (breaking)

0.7.0 Feb 17, 2024
0.6.0 Nov 4, 2023
0.5.0 Jul 11, 2023
0.4.0 Mar 7, 2023
0.1.0 Oct 25, 2022

#96 in Game dev

Download history 3/week @ 2023-12-20 1/week @ 2023-12-27 152/week @ 2024-02-14 86/week @ 2024-02-21 47/week @ 2024-02-28 28/week @ 2024-03-06 19/week @ 2024-03-13

196 downloads per month
Used in leknet

MIT/Apache

140KB
2.5K SLoC

Bevy tracking crates.io

Bevy Quinnet

A Client/Server game networking plugin using QUIC, for the Bevy engine.

QUIC as a game networking protocol

QUIC was really attractive to me as a game networking protocol because most of the hard-work is done by the protocol specification and the implementation (here Quinn). No need to reinvent the wheel once again on error-prones subjects such as a UDP reliability wrapper, some encryption & authentication mechanisms, congestion-control, and so on.

Most of the features proposed by the big networking libs are supported by default through QUIC. As an example, here is the list of features presented in GameNetworkingSockets:

  • Connection-oriented API (like TCP): -> by default
  • ... but message-oriented (like UDP), not stream-oriented: -> by default (*)
  • Supports both reliable and unreliable message types: ->by default
  • Messages can be larger than underlying MTU. The protocol performs fragmentation, reassembly, and retransmission for reliable messages: -> by default (frag & reassembly is not done by the protocol for unreliable packets)
  • A reliability layer [...]. It is based on the "ack vector" model from DCCP (RFC 4340, section 11.4) and Google QUIC and discussed in the context of games by Glenn Fiedler [...]: -> by default.
  • Encryption. [...] The details for shared key derivation and per-packet IV are based on the design used by Google's QUIC protocol: -> by default
  • Tools for simulating packet latency/loss, and detailed stats measurement: -> Not by default
  • Head-of-line blocking control and bandwidth sharing of multiple message streams on the same connection.: -> by default
  • IPv6 support: -> by default
  • Peer-to-peer networking (NAT traversal with ICE + signaling + symmetric connect mode): -> Not by default
  • Cross platform: -> by default, where UDP is available

-> Roughly 9 points out of 11 by default.

(*) Kinda, when sharing a QUIC stream, reliable messages need to be framed.

Features

Quinnet has basic features, I made it mostly to satisfy my own needs for my own game projects.

It currently features:

  • A Client plugin which can:
    • Connect/disconnect to/from one or more server
    • Send & receive unreliable and ordered/unordered reliable messages
  • A Server plugin which can:
    • Accept client connections & disconnect them
    • Send & receive unreliable and ordered/unordered reliable messages
  • Both client & server accept custom protocol structs/enums defined by the user as the message format.
  • Communications are encrypted, and the client can authenticate the server.

Although Quinn and parts of Quinnet are asynchronous, the APIs exposed by Quinnet for the client and server are synchronous. This makes the surface API easy to work with and adapted to a Bevy usage. The implementation uses tokio channels internally to communicate with the networking async tasks.

Roadmap

This is a bird-eye view of the features/tasks that will probably be worked on next (in no particular order):

  • Previous roadmap tasks
  • Security: More certificates support, see certificates-and-server-authentication
  • Feature: Implement unordered & ordered reliable message channels on client & server, see channels
  • Feature: Implement unreliable message channel on client & server
  • Feature: Implement unreliable messages larger than the path MTU from client & server
  • Performance: feed multiples messages before flushing ordered reliable channels
  • Clean: Rework the error handling in the async back-end
  • Clean: Rework the error handling on collections to not fail at the first error
  • Documentation: Fully document the API

Quickstart

Client

  • Add the QuinnetClientPlugin to the bevy app:
 App::new()
        // ...
        .add_plugins(QuinnetClientPlugin::default())
        // ...
        .run();
  • You can then use the Client resource to connect, send & receive messages:
fn start_connection(client: ResMut<Client>) {
    client
        .open_connection(
            ClientConfigurationData::from_ips(
                IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1)),
                6000,
                IpAddr::V4(Ipv4Addr::new(0, 0, 0, 0)),
                0,
            ),
            CertificateVerificationMode::SkipVerification,
        );
    
    // When trully connected, you will receive a ConnectionEvent
  • To process server messages, you can use a bevy system such as the one below. The function receive_message is generic, here ServerMessage is a user provided enum deriving Serialize and Deserialize.
fn handle_server_messages(
    mut client: ResMut<Client>,
    /*...*/
) {
    while let Ok(Some(message)) = client.connection().receive_message::<ServerMessage>() {
        match message {
            // Match on your own message types ...
            ServerMessage::ClientConnected { client_id, username} => {/*...*/}
            ServerMessage::ClientDisconnected { client_id } => {/*...*/}
            ServerMessage::ChatMessage { client_id, message } => {/*...*/}
        }
    }
}

Server

  • Add the QuinnetServerPlugin to the bevy app:
 App::new()
        /*...*/
        .add_plugins(QuinnetServerPlugin::default())
        /*...*/
        .run();
  • You can then use the Server resource to start the listening server:
fn start_listening(mut server: ResMut<Server>) {
    server
        .start_endpoint(
            ServerConfigurationData::from_ip(IpAddr::V4(Ipv4Addr::new(0, 0, 0, 0)), 6000),
            CertificateRetrievalMode::GenerateSelfSigned,
        )
        .unwrap();
}
  • To process client messages & send messages, you can use a bevy system such as the one below. The function receive_message is generic, here ClientMessage is a user provided enum deriving Serialize and Deserialize.
fn handle_client_messages(
    mut server: ResMut<Server>,
    /*...*/
) {
    let mut endpoint = server.endpoint_mut();
    for client_id in endpoint.clients() {
        while let Some(message) = endpoint.try_receive_message_from::<ClientMessage>(client_id) {
            match message {
                // Match on your own message types ...
                ClientMessage::Join { username} => {
                    // Send a messsage to 1 client
                    endpoint.send_message(client_id, ServerMessage::InitClient {/*...*/}).unwrap();
                    /*...*/
                }
                ClientMessage::Disconnect { } => {
                    // Disconnect a client
                    endpoint.disconnect_client(client_id);
                    /*...*/
                }
                ClientMessage::ChatMessage { message } => {
                    // Send a message to a group of clients
                    endpoint.send_group_message(
                            client_group, // Iterator of ClientId
                            ServerMessage::ChatMessage {/*...*/}
                        )
                        .unwrap();
                    /*...*/
                }           
            }
        }
    }
}

You can also use endpoint.broadcast_message, which will send a message to all connected clients. "Connected" here means connected to the server plugin, which happens before your own app handshakes/verifications if you have any. Use send_group_message if you want to control the recipients.

Channels

There are currently 3 types of channels available when you send a message:

  • OrderedReliable: ensure that messages sent are delivered, and are processed by the receiving end in the same order as they were sent (exemple usage: chat messages)
  • UnorderedReliable: ensure that messages sent are delivered, in any order (exemple usage: an animation trigger)
  • Unreliable: no guarantees on the delivery or the order of processing by the receiving end (exemple usage: an entity position sent every ticks)

By default for the server as well as the client, Quinnet creates 1 channel instance of each type, each with their own ChannelId. Among those, there is a default channel which will be used when you don't specify the channel. At startup, this default channel is an OrderedReliable channel.

let connection = client.connection();
// No channel specified, default channel is used
connection.send_message(message);
// Specifying the channel id
connection.send_message_on(ChannelId::UnorderedReliable, message);
// Changing the default channel
connection.set_default_channel(ChannelId::Unreliable);

One channel instance is more than enough for UnorderedReliable and Unreliable since messages are not ordered on those, in fact even if you tried to create more, Quinnet would just reuse the existing ones. This is why you can directly use their ChannelId when sending messages, as seen above.

In some cases, you may however want to create more than one channel instance, it may be the case for OrderedReliable channels to avoid some Head of line blocking issues. Channels can be opened & closed at any time.

// If you want to create more channels
let chat_channel = client.connection().open_channel(ChannelType::OrderedReliable).unwrap();
client.connection().send_message_on(chat_channel, chat_message);

On the server, channels are created and closed at the endpoint level and exist for all current & future clients.

let chat_channel = server.endpoint().open_channel(ChannelType::OrderedReliable).unwrap();
server.endpoint().send_message_on(client_id, chat_channel, chat_message);

Certificates and server authentication

Bevy Quinnet (through Quinn & QUIC) uses TLS 1.3 for authentication, the server needs to provide the client with a certificate confirming its identity, and the client must be configured to trust the certificates it receives from the server.

Here are the current options available to the server and client plugins for the server authentication:

  • Client :
    • Skip certificate verification (messages are still encrypted, but the server is not authentified)
    • Accept certificates issued by a Certificate Authority (implemented in Quinn, using rustls)
    • Trust on first use certificates (implemented in Quinnet, using rustls)
  • Server:
    • Generate and issue a self-signed certificate
    • Issue an already existing certificate (CA or self-signed)

On the client:

    // To accept any certificate
    client.open_connection(/*...*/, CertificateVerificationMode::SkipVerification);
    // To only accept certificates issued by a Certificate Authority
    client.open_connection(/*...*/, CertificateVerificationMode::SignedByCertificateAuthority);
    // To use the default configuration of the Trust on first use authentication scheme
    client.open_connection(/*...*/, CertificateVerificationMode::TrustOnFirstUse(TrustOnFirstUseConfig {
            // You can configure TrustOnFirstUse through the TrustOnFirstUseConfig:
            // Provide your own fingerprint store variable/file,
            // or configure the actions to apply for each possible certificate verification status.
            ..Default::default()
        }),
    );

On the server:

    // To generate a new self-signed certificate on each startup 
    server.start_endpoint(/*...*/, CertificateRetrievalMode::GenerateSelfSigned { 
        server_hostname: "127.0.0.1".to_string(),
    });
    // To load a pre-existing one from files
    server.start_endpoint(/*...*/, CertificateRetrievalMode::LoadFromFile {
        cert_file: "./certificates.pem".into(),
        key_file: "./privkey.pem".into(),
    });
    // To load one from files, or to generate a new self-signed one if the files do not exist.
    server.start_endpoint(/*...*/, CertificateRetrievalMode::LoadFromFileOrGenerateSelfSigned {
        cert_file: "./certificates.pem".into(),
        key_file: "./privkey.pem".into(),
        save_on_disk: true, // To persist on disk if generated
        server_hostname: "127.0.0.1".to_string(),
    });

See more about certificates in the certificates readme

Logs

For logs configuration, see the unoffical bevy cheatbook.

Examples

Chat example

This demo comes with an headless server, a terminal client and a shared protocol.

Start the server with cargo run --example chat-server and as many clients as needed with cargo run --example chat-client. Type quit to disconnect with a client.

terminal_chat_demo

Breakout versus example

This demo is a modification of the classic Bevy breakout example to turn it into a 2 players versus game.

It hosts a local server from inside a client, instead of a dedicated headless server as in the chat demo. You can find a server module, a client module, a shared protocol and the bevy app schedule.

It also makes uses of Channels. The server broadcasts the paddle position every tick via the PaddleMoved message on an Unreliable channel, the BrickDestroyed and BallCollided events are emitted on an UnorderedReliable channel, while the game setup and start are using the default OrderedReliable channel.

Start two clients with cargo run --example breakout, "Host" on one and "Join" on the other.

breakout_versus_demo_short.mp4

Examples can be found in the examples directory.

Compatible Bevy versions

Compatibility of bevy_quinnet versions:

bevy_quinnet bevy
0.7 0.13
0.6 0.12
0.5 0.11
0.4 0.10
0.2-0.3 0.9
0.1 0.8

Limitations

  • QUIC is not available in a Browser (used in browsers but not exposed as an API). For now I would rather wait on WebTransport("QUIC" on the Web) than hack on WebRTC data channels.

Credits

Thanks to the Renet crate for the inspiration on the high level API.

License

bevy-quinnet is free and open source. All code in this repository is dual-licensed under either:

at your option.

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.

Dependencies

~31–66MB
~1M SLoC