Split transport and crypto parts into separate files. New files: src/event/ngx_event_quic_protection.h src/event/ngx_event_quic_protection.c The protection.h header provides interface to the crypto part of the QUIC: 2 functions to initialize corresponding secrets: ngx_quic_set_initial_secret() ngx_quic_set_encryption_secret() and 2 functions to deal with packet processing: ngx_quic_encrypt() ngx_quic_decrypt() Also, structures representing secrets are defined there. All functions require SSL connection and a pool, only crypto operations inside, no access to nginx connections or events. Currently pool->log is used for the logging (instead of original c->log).

--- a/src/core/ngx_core.h
+++ b/src/core/ngx_core.h
@@ -85,6 +85,7 @@ typedef void (*ngx_connection_handler_pt
 #if (NGX_OPENSSL)
 #include <ngx_event_openssl.h>
 #include <ngx_event_quic.h>
+#include <ngx_event_quic_protection.h>
 #endif
 #include <ngx_process_cycle.h>
 #include <ngx_conf_file.h>