ComEX'25 - Analysis and Visualization of QUIC Protocol Deployment in Vietnam

by Thanh Trung Nguyen, Thanh Le, Minh Hai Vu, Phi Le Nguyen, Kien Nguyen

This project presents the first large-scale analysis of QUIC protocol deployment across Vietnam. Using tools like ZMap [Durumeric et al., 2013], ZDNS, and QScanner [Zirngibl et al., 2024], we scanned over 16 million IPv4 addresses (sourced from VNNIC) to assess QUIC adoption and visualize its distribution geographically.

Full details on the methodology behind our QUIC deployment analysis are available in our paper.

Construction of the Dataset

We designed a multi-stage scanning pipeline to accurately identify and characterize QUIC deployment across the Vietnamese Internet. Our approach ensures comprehensive coverage by targeting the entire IPv4 address space allocated to Vietnam, while minimizing network intrusion through efficient scanning techniques.

The process begins with broad reachability testing and narrows down to specific protocol handshakes. We rely on RFC 9000 [RFC 9000] to verify compliance with the standardized IETF QUIC protocol, distinguishing it from legacy versions like gQUIC. This distinction is critical as early deployments [Zirngibl et al., 2021] often differ significantly from the final standard.

Interactive Map of QUIC Deployment

The map below visualizes the geographic and AS-level distribution of QUIC-enabled servers across Vietnam.

Properties of Tools & Data Sources

VNNIC Data

Visit provider page

Our target IP list is derived from the Vietnam Internet Network Information Center (VNNIC). We use their officially published statistics and IP allocation lists to define the boundaries of the Vietnamese Internet.

The dataset covers over 16 million IPv4 addresses. We cross-reference this with other ranking methodologies like Tranco [Le Pochat et al., 2019] and traffic reports [e-Conomy SEA 2024] to ensure our study reflects the most relevant and active portions of the local network ecosystem.

Result Overview

Insights from our 2025 nationwide QUIC scanning study

8,337 QUIC-Enabled IPs
99.3% IETF QUIC (RFC 9000)
Top ASes VNPT, Viettel, FPT
80.5% AES 128 GCM SHA256
69.4% Server-supported

Detailed Analysis & Terminology

QUIC-Enabled IPs

8,337 unique IPv4 addresses were found to support the QUIC protocol. This number represents the subset of scanned hosts that successfully completed a QUIC handshake on UDP port 443, indicating active deployment of the protocol.

IETF QUIC (RFC 9000)

99.3% of the identified servers support RFC 9000 [RFC 9000], the standardized version of QUIC published by the IETF in 2021. This high percentage indicates that deployments in Vietnam are modern and compliant with the latest international standards, rather than using older, experimental versions like Google QUIC (gQUIC).

Top ASes: VNPT, Viettel, FPT

The deployment of QUIC is highly concentrated within the networks of Vietnam's largest Internet Service Providers (ISPs). VNPT, Viettel, and FPT Telecom are the top Autonomous Systems (ASes) hosting these QUIC-enabled IP addresses, reflecting the centralized nature of internet infrastructure in the region.

AES 128 GCM SHA256

80.5% of the servers negotiated TLS_AES_128_GCM_SHA256 as their cipher suite. This is a cryptographic set used in TLS 1.3 (which is mandatory for QUIC) to ensure data confidentiality and integrity. It is currently the most widely used and recommended balance between security and performance.

69.4% Server-supported (Connection Migration)

This figure refers to Connection Migration [Buchet & Pelsser, 2025], a key feature of QUIC that allows a connection to survive changes in the client's IP address (e.g., switching from Wi-Fi to 4G). 69.4% of servers support this feature, meaning they do not explicitly disable it, thereby enabling smoother transitions for mobile users.