grpc 1.72.0 → 1.73.0

data/src/core/lib/event_engine/utils.cc

@@ -14,12 +14,20 @@
 #include "src/core/lib/event_engine/utils.h"
 
 #include <grpc/event_engine/event_engine.h>
+#include <grpc/event_engine/internal/write_event.h>
 #include <grpc/support/port_platform.h>
 #include <stdint.h>
 
 #include <algorithm>
+#include <string>
+#include <utility>
+#include <vector>
 
+#include "absl/log/log.h"
 #include "absl/strings/str_cat.h"
+#include "absl/strings/string_view.h"
+#include "src/core/lib/event_engine/extensions/blocking_dns.h"
+#include "src/core/lib/event_engine/query_extensions.h"
 #include "src/core/util/notification.h"
 #include "src/core/util/time.h"
 
@@ -41,6 +49,12 @@ grpc_core::Timestamp ToTimestamp(grpc_core::Timestamp now,
 absl::StatusOr<std::vector<EventEngine::ResolvedAddress>>
 LookupHostnameBlocking(EventEngine::DNSResolver* dns_resolver,
                        absl::string_view name, absl::string_view default_port) {
+  auto* blocking_resolver =
+      QueryExtension<ResolverSupportsBlockingLookups>(dns_resolver);
+  if (blocking_resolver != nullptr) {
+    return blocking_resolver->LookupHostnameBlocking(name, default_port);
+  }
+
   absl::StatusOr<std::vector<EventEngine::ResolvedAddress>> results;
   grpc_core::Notification done;
   dns_resolver->LookupHostname(
@@ -53,4 +67,24 @@ LookupHostnameBlocking(EventEngine::DNSResolver* dns_resolver,
   return results;
 }
 
+absl::string_view WriteEventToString(
+    grpc_event_engine::experimental::internal::WriteEvent event) {
+  switch (event) {
+    case grpc_event_engine::experimental::internal::WriteEvent::kSendMsg:
+      return "SENDMSG";
+    case grpc_event_engine::experimental::internal::WriteEvent::kScheduled:
+      return "SCHEDULED";
+    case grpc_event_engine::experimental::internal::WriteEvent::kSent:
+      return "SENT";
+    case grpc_event_engine::experimental::internal::WriteEvent::kAcked:
+      return "ACKED";
+    case grpc_event_engine::experimental::internal::WriteEvent::kClosed:
+      return "CLOSED";
+    case grpc_event_engine::experimental::internal::WriteEvent::kCount:
+      break;
+  }
+  LOG(FATAL) << "WriteEventToString called with " << static_cast<int>(event);
+  return "UNKNOWN";
+}
+
 }  // namespace grpc_event_engine::experimental

data/src/core/lib/event_engine/utils.h

@@ -42,6 +42,9 @@ absl::StatusOr<std::vector<EventEngine::ResolvedAddress>>
 LookupHostnameBlocking(EventEngine::DNSResolver* dns_resolver,
                        absl::string_view name, absl::string_view default_port);
 
+absl::string_view WriteEventToString(
+    grpc_event_engine::experimental::internal::WriteEvent event);
+
 }  // namespace grpc_event_engine::experimental
 
 #endif  // GRPC_SRC_CORE_LIB_EVENT_ENGINE_UTILS_H

data/src/core/lib/event_engine/windows/windows_endpoint.cc

@@ -121,7 +121,7 @@ void WindowsEndpoint::AsyncIOState::DoTcpRead(SliceBuffer* buffer) {
 }
 
 bool WindowsEndpoint::Read(absl::AnyInvocable<void(absl::Status)> on_read,
-                           SliceBuffer* buffer, const ReadArgs* /* args */) {
+                           SliceBuffer* buffer, ReadArgs /* args */) {
   if (io_state_->socket->IsShutdown()) {
     io_state_->thread_pool->Run([on_read = std::move(on_read)]() mutable {
       on_read(absl::InternalError("Socket is shutting down."));
@@ -142,7 +142,7 @@ bool WindowsEndpoint::Read(absl::AnyInvocable<void(absl::Status)> on_read,
 }
 
 bool WindowsEndpoint::Write(absl::AnyInvocable<void(absl::Status)> on_writable,
-                            SliceBuffer* data, const WriteArgs* /* args */) {
+                            SliceBuffer* data, WriteArgs /* args */) {
   GRPC_TRACE_LOG(event_engine_endpoint, INFO)
       << "WindowsEndpoint::" << this << " writing";
   if (io_state_->socket->IsShutdown()) {

data/src/core/lib/event_engine/windows/windows_endpoint.h

@@ -32,11 +32,18 @@ class WindowsEndpoint : public EventEngine::Endpoint {
                   ThreadPool* thread_pool, std::shared_ptr<EventEngine> engine);
   ~WindowsEndpoint() override;
   bool Read(absl::AnyInvocable<void(absl::Status)> on_read, SliceBuffer* buffer,
-            const ReadArgs* args) override;
+            ReadArgs args) override;
   bool Write(absl::AnyInvocable<void(absl::Status)> on_writable,
-             SliceBuffer* data, const WriteArgs* args) override;
+             SliceBuffer* data, WriteArgs args) override;
   const EventEngine::ResolvedAddress& GetPeerAddress() const override;
   const EventEngine::ResolvedAddress& GetLocalAddress() const override;
+  std::vector<size_t> AllWriteMetrics() override { return {}; }
+  std::optional<absl::string_view> GetMetricName(size_t) override {
+    return std::nullopt;
+  }
+  std::optional<size_t> GetMetricKey(absl::string_view) override {
+    return std::nullopt;
+  }
 
  private:
   struct AsyncIOState;

data/src/core/lib/experiments/experiments.cc

@@ -23,21 +23,18 @@
 
 #if defined(GRPC_CFSTREAM)
 namespace {
-const char* const description_backoff_cap_initial_at_max =
-    "Backoff library applies max_backoff even on initial_backoff.";
-const char* const additional_constraints_backoff_cap_initial_at_max = "{}";
 const char* const description_call_tracer_in_transport =
     "Transport directly passes byte counts to CallTracer.";
 const char* const additional_constraints_call_tracer_in_transport = "{}";
-const char* const description_call_tracer_transport_fix =
-    "Use the correct call tracer in transport";
-const char* const additional_constraints_call_tracer_transport_fix = "{}";
 const char* const description_callv3_client_auth_filter =
     "Use the CallV3 client auth filter.";
 const char* const additional_constraints_callv3_client_auth_filter = "{}";
 const char* const description_chaotic_good_framing_layer =
     "Enable the chaotic good framing layer.";
 const char* const additional_constraints_chaotic_good_framing_layer = "{}";
+const char* const description_chttp2_bound_write_size =
+    "Fix a bug where chttp2 can generate very large writes";
+const char* const additional_constraints_chttp2_bound_write_size = "{}";
 const char* const description_error_flatten =
     "Flatten errors to ordinary absl::Status form.";
 const char* const additional_constraints_error_flatten = "{}";
@@ -76,6 +73,9 @@ const uint8_t required_experiments_event_engine_for_all_other_endpoints[] = {
     static_cast<uint8_t>(
         grpc_core::kExperimentIdEventEngineDnsNonClientChannel),
     static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener)};
+const char* const description_event_engine_secure_endpoint =
+    "Use EventEngine secure endpoint wrapper instead of iomgr when available";
+const char* const additional_constraints_event_engine_secure_endpoint = "{}";
 const char* const description_free_large_allocator =
     "If set, return all free bytes from a \042big\042 allocator";
 const char* const additional_constraints_free_large_allocator = "{}";
@@ -87,6 +87,9 @@ const char* const description_local_connector_secure =
     "Local security connector uses TSI_SECURITY_NONE for LOCAL_TCP "
     "connections.";
 const char* const additional_constraints_local_connector_secure = "{}";
+const char* const description_max_inflight_pings_strict_limit =
+    "If set, the max inflight pings limit is strictly enforced.";
+const char* const additional_constraints_max_inflight_pings_strict_limit = "{}";
 const char* const description_max_pings_wo_data_throttle =
     "Experiment to throttle pings to a period of 1 min when "
     "GRPC_ARG_HTTP2_MAX_PINGS_WITHOUT_DATA limit has reached (instead of "
@@ -138,14 +141,33 @@ const char* const description_schedule_cancellation_over_write =
     "Allow cancellation op to be scheduled over a write";
 const char* const additional_constraints_schedule_cancellation_over_write =
     "{}";
+const char* const description_secure_endpoint_offload_large_reads =
+    "If a large read needs to be decrypted, use a separate thread.";
+const char* const additional_constraints_secure_endpoint_offload_large_reads =
+    "{}";
+const uint8_t required_experiments_secure_endpoint_offload_large_reads[] = {
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineClient),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineSecureEndpoint)};
+const char* const description_secure_endpoint_offload_large_writes =
+    "If a large read write to be encrypted, use a separate thread.";
+const char* const additional_constraints_secure_endpoint_offload_large_writes =
+    "{}";
+const uint8_t required_experiments_secure_endpoint_offload_large_writes[] = {
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineClient),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineSecureEndpoint)};
 const char* const description_server_global_callbacks_ownership =
     "If set, server global callbacks ownership is fixed to not be owned by "
     "gRPC.";
 const char* const additional_constraints_server_global_callbacks_ownership =
     "{}";
-const char* const description_server_listener =
-    "If set, the new server listener classes are used.";
-const char* const additional_constraints_server_listener = "{}";
+const char* const description_shard_global_connection_pool =
+    "If set, shard the global connection pool to improve parallelism.";
+const char* const additional_constraints_shard_global_connection_pool = "{}";
+const char* const description_sleep_promise_exec_ctx_removal =
+    "If set, polling the sleep promise does not rely on the ExecCtx.";
+const char* const additional_constraints_sleep_promise_exec_ctx_removal = "{}";
 const char* const description_tcp_frame_size_tuning =
     "If set, enables TCP to use RPC size estimation made by higher layers. TCP "
     "would not indicate completion of a read operation until a specified "
@@ -155,6 +177,10 @@ const char* const additional_constraints_tcp_frame_size_tuning = "{}";
 const char* const description_tcp_rcv_lowat =
     "Use SO_RCVLOWAT to avoid wakeups on the read path.";
 const char* const additional_constraints_tcp_rcv_lowat = "{}";
+const char* const description_tsi_frame_protector_without_locks =
+    "Do not hold locks while using the tsi_frame_protector.";
+const char* const additional_constraints_tsi_frame_protector_without_locks =
+    "{}";
 const char* const description_unconstrained_max_quota_buffer_size =
     "Discard the cap on the max free pool size for one memory allocator";
 const char* const additional_constraints_unconstrained_max_quota_buffer_size =
@@ -164,22 +190,21 @@ const char* const additional_constraints_unconstrained_max_quota_buffer_size =
 namespace grpc_core {
 
 const ExperimentMetadata g_experiment_metadata[] = {
-    {"backoff_cap_initial_at_max", description_backoff_cap_initial_at_max,
-     additional_constraints_backoff_cap_initial_at_max, nullptr, 0, true, true},
     {"call_tracer_in_transport", description_call_tracer_in_transport,
      additional_constraints_call_tracer_in_transport, nullptr, 0, true, false},
-    {"call_tracer_transport_fix", description_call_tracer_transport_fix,
-     additional_constraints_call_tracer_transport_fix, nullptr, 0, true, true},
     {"callv3_client_auth_filter", description_callv3_client_auth_filter,
      additional_constraints_callv3_client_auth_filter, nullptr, 0, false, true},
     {"chaotic_good_framing_layer", description_chaotic_good_framing_layer,
-     additional_constraints_chaotic_good_framing_layer, nullptr, 0, true, true},
+     additional_constraints_chaotic_good_framing_layer, nullptr, 0, true,
+     false},
+    {"chttp2_bound_write_size", description_chttp2_bound_write_size,
+     additional_constraints_chttp2_bound_write_size, nullptr, 0, false, true},
     {"error_flatten", description_error_flatten,
      additional_constraints_error_flatten, nullptr, 0, false, false},
     {"event_engine_client", description_event_engine_client,
-     additional_constraints_event_engine_client, nullptr, 0, false, false},
+     additional_constraints_event_engine_client, nullptr, 0, true, false},
     {"event_engine_dns", description_event_engine_dns,
-     additional_constraints_event_engine_dns, nullptr, 0, false, false},
+     additional_constraints_event_engine_dns, nullptr, 0, true, false},
     {"event_engine_dns_non_client_channel",
      description_event_engine_dns_non_client_channel,
      additional_constraints_event_engine_dns_non_client_channel, nullptr, 0,
@@ -187,7 +212,7 @@ const ExperimentMetadata g_experiment_metadata[] = {
     {"event_engine_fork", description_event_engine_fork,
      additional_constraints_event_engine_fork, nullptr, 0, false, false},
     {"event_engine_listener", description_event_engine_listener,
-     additional_constraints_event_engine_listener, nullptr, 0, false, false},
+     additional_constraints_event_engine_listener, nullptr, 0, true, false},
     {"event_engine_callback_cq", description_event_engine_callback_cq,
      additional_constraints_event_engine_callback_cq,
      required_experiments_event_engine_callback_cq, 2, true, true},
@@ -195,6 +220,9 @@ const ExperimentMetadata g_experiment_metadata[] = {
      description_event_engine_for_all_other_endpoints,
      additional_constraints_event_engine_for_all_other_endpoints,
      required_experiments_event_engine_for_all_other_endpoints, 4, true, false},
+    {"event_engine_secure_endpoint", description_event_engine_secure_endpoint,
+     additional_constraints_event_engine_secure_endpoint, nullptr, 0, true,
+     false},
     {"free_large_allocator", description_free_large_allocator,
      additional_constraints_free_large_allocator, nullptr, 0, false, true},
     {"keep_alive_ping_timer_batch", description_keep_alive_ping_timer_batch,
@@ -202,6 +230,10 @@ const ExperimentMetadata g_experiment_metadata[] = {
      true},
     {"local_connector_secure", description_local_connector_secure,
      additional_constraints_local_connector_secure, nullptr, 0, false, true},
+    {"max_inflight_pings_strict_limit",
+     description_max_inflight_pings_strict_limit,
+     additional_constraints_max_inflight_pings_strict_limit, nullptr, 0, true,
+     true},
     {"max_pings_wo_data_throttle", description_max_pings_wo_data_throttle,
      additional_constraints_max_pings_wo_data_throttle, nullptr, 0, true, true},
     {"monitoring_experiment", description_monitoring_experiment,
@@ -235,16 +267,33 @@ const ExperimentMetadata g_experiment_metadata[] = {
      description_schedule_cancellation_over_write,
      additional_constraints_schedule_cancellation_over_write, nullptr, 0, false,
      true},
+    {"secure_endpoint_offload_large_reads",
+     description_secure_endpoint_offload_large_reads,
+     additional_constraints_secure_endpoint_offload_large_reads,
+     required_experiments_secure_endpoint_offload_large_reads, 3, false, true},
+    {"secure_endpoint_offload_large_writes",
+     description_secure_endpoint_offload_large_writes,
+     additional_constraints_secure_endpoint_offload_large_writes,
+     required_experiments_secure_endpoint_offload_large_writes, 3, false, true},
     {"server_global_callbacks_ownership",
      description_server_global_callbacks_ownership,
      additional_constraints_server_global_callbacks_ownership, nullptr, 0,
      false, true},
-    {"server_listener", description_server_listener,
-     additional_constraints_server_listener, nullptr, 0, true, true},
+    {"shard_global_connection_pool", description_shard_global_connection_pool,
+     additional_constraints_shard_global_connection_pool, nullptr, 0, true,
+     true},
+    {"sleep_promise_exec_ctx_removal",
+     description_sleep_promise_exec_ctx_removal,
+     additional_constraints_sleep_promise_exec_ctx_removal, nullptr, 0, false,
+     true},
     {"tcp_frame_size_tuning", description_tcp_frame_size_tuning,
      additional_constraints_tcp_frame_size_tuning, nullptr, 0, false, true},
     {"tcp_rcv_lowat", description_tcp_rcv_lowat,
      additional_constraints_tcp_rcv_lowat, nullptr, 0, false, true},
+    {"tsi_frame_protector_without_locks",
+     description_tsi_frame_protector_without_locks,
+     additional_constraints_tsi_frame_protector_without_locks, nullptr, 0,
+     false, true},
     {"unconstrained_max_quota_buffer_size",
      description_unconstrained_max_quota_buffer_size,
      additional_constraints_unconstrained_max_quota_buffer_size, nullptr, 0,
@@ -255,21 +304,18 @@ const ExperimentMetadata g_experiment_metadata[] = {
 
 #elif defined(GPR_WINDOWS)
 namespace {
-const char* const description_backoff_cap_initial_at_max =
-    "Backoff library applies max_backoff even on initial_backoff.";
-const char* const additional_constraints_backoff_cap_initial_at_max = "{}";
 const char* const description_call_tracer_in_transport =
     "Transport directly passes byte counts to CallTracer.";
 const char* const additional_constraints_call_tracer_in_transport = "{}";
-const char* const description_call_tracer_transport_fix =
-    "Use the correct call tracer in transport";
-const char* const additional_constraints_call_tracer_transport_fix = "{}";
 const char* const description_callv3_client_auth_filter =
     "Use the CallV3 client auth filter.";
 const char* const additional_constraints_callv3_client_auth_filter = "{}";
 const char* const description_chaotic_good_framing_layer =
     "Enable the chaotic good framing layer.";
 const char* const additional_constraints_chaotic_good_framing_layer = "{}";
+const char* const description_chttp2_bound_write_size =
+    "Fix a bug where chttp2 can generate very large writes";
+const char* const additional_constraints_chttp2_bound_write_size = "{}";
 const char* const description_error_flatten =
     "Flatten errors to ordinary absl::Status form.";
 const char* const additional_constraints_error_flatten = "{}";
@@ -308,6 +354,9 @@ const uint8_t required_experiments_event_engine_for_all_other_endpoints[] = {
     static_cast<uint8_t>(
         grpc_core::kExperimentIdEventEngineDnsNonClientChannel),
     static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener)};
+const char* const description_event_engine_secure_endpoint =
+    "Use EventEngine secure endpoint wrapper instead of iomgr when available";
+const char* const additional_constraints_event_engine_secure_endpoint = "{}";
 const char* const description_free_large_allocator =
     "If set, return all free bytes from a \042big\042 allocator";
 const char* const additional_constraints_free_large_allocator = "{}";
@@ -319,6 +368,9 @@ const char* const description_local_connector_secure =
     "Local security connector uses TSI_SECURITY_NONE for LOCAL_TCP "
     "connections.";
 const char* const additional_constraints_local_connector_secure = "{}";
+const char* const description_max_inflight_pings_strict_limit =
+    "If set, the max inflight pings limit is strictly enforced.";
+const char* const additional_constraints_max_inflight_pings_strict_limit = "{}";
 const char* const description_max_pings_wo_data_throttle =
     "Experiment to throttle pings to a period of 1 min when "
     "GRPC_ARG_HTTP2_MAX_PINGS_WITHOUT_DATA limit has reached (instead of "
@@ -370,14 +422,33 @@ const char* const description_schedule_cancellation_over_write =
     "Allow cancellation op to be scheduled over a write";
 const char* const additional_constraints_schedule_cancellation_over_write =
     "{}";
+const char* const description_secure_endpoint_offload_large_reads =
+    "If a large read needs to be decrypted, use a separate thread.";
+const char* const additional_constraints_secure_endpoint_offload_large_reads =
+    "{}";
+const uint8_t required_experiments_secure_endpoint_offload_large_reads[] = {
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineClient),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineSecureEndpoint)};
+const char* const description_secure_endpoint_offload_large_writes =
+    "If a large read write to be encrypted, use a separate thread.";
+const char* const additional_constraints_secure_endpoint_offload_large_writes =
+    "{}";
+const uint8_t required_experiments_secure_endpoint_offload_large_writes[] = {
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineClient),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineSecureEndpoint)};
 const char* const description_server_global_callbacks_ownership =
     "If set, server global callbacks ownership is fixed to not be owned by "
     "gRPC.";
 const char* const additional_constraints_server_global_callbacks_ownership =
     "{}";
-const char* const description_server_listener =
-    "If set, the new server listener classes are used.";
-const char* const additional_constraints_server_listener = "{}";
+const char* const description_shard_global_connection_pool =
+    "If set, shard the global connection pool to improve parallelism.";
+const char* const additional_constraints_shard_global_connection_pool = "{}";
+const char* const description_sleep_promise_exec_ctx_removal =
+    "If set, polling the sleep promise does not rely on the ExecCtx.";
+const char* const additional_constraints_sleep_promise_exec_ctx_removal = "{}";
 const char* const description_tcp_frame_size_tuning =
     "If set, enables TCP to use RPC size estimation made by higher layers. TCP "
     "would not indicate completion of a read operation until a specified "
@@ -387,6 +458,10 @@ const char* const additional_constraints_tcp_frame_size_tuning = "{}";
 const char* const description_tcp_rcv_lowat =
     "Use SO_RCVLOWAT to avoid wakeups on the read path.";
 const char* const additional_constraints_tcp_rcv_lowat = "{}";
+const char* const description_tsi_frame_protector_without_locks =
+    "Do not hold locks while using the tsi_frame_protector.";
+const char* const additional_constraints_tsi_frame_protector_without_locks =
+    "{}";
 const char* const description_unconstrained_max_quota_buffer_size =
     "Discard the cap on the max free pool size for one memory allocator";
 const char* const additional_constraints_unconstrained_max_quota_buffer_size =
@@ -396,16 +471,15 @@ const char* const additional_constraints_unconstrained_max_quota_buffer_size =
 namespace grpc_core {
 
 const ExperimentMetadata g_experiment_metadata[] = {
-    {"backoff_cap_initial_at_max", description_backoff_cap_initial_at_max,
-     additional_constraints_backoff_cap_initial_at_max, nullptr, 0, true, true},
     {"call_tracer_in_transport", description_call_tracer_in_transport,
      additional_constraints_call_tracer_in_transport, nullptr, 0, true, false},
-    {"call_tracer_transport_fix", description_call_tracer_transport_fix,
-     additional_constraints_call_tracer_transport_fix, nullptr, 0, true, true},
     {"callv3_client_auth_filter", description_callv3_client_auth_filter,
      additional_constraints_callv3_client_auth_filter, nullptr, 0, false, true},
     {"chaotic_good_framing_layer", description_chaotic_good_framing_layer,
-     additional_constraints_chaotic_good_framing_layer, nullptr, 0, true, true},
+     additional_constraints_chaotic_good_framing_layer, nullptr, 0, true,
+     false},
+    {"chttp2_bound_write_size", description_chttp2_bound_write_size,
+     additional_constraints_chttp2_bound_write_size, nullptr, 0, false, true},
     {"error_flatten", description_error_flatten,
      additional_constraints_error_flatten, nullptr, 0, false, false},
     {"event_engine_client", description_event_engine_client,
@@ -427,6 +501,9 @@ const ExperimentMetadata g_experiment_metadata[] = {
      description_event_engine_for_all_other_endpoints,
      additional_constraints_event_engine_for_all_other_endpoints,
      required_experiments_event_engine_for_all_other_endpoints, 4, true, false},
+    {"event_engine_secure_endpoint", description_event_engine_secure_endpoint,
+     additional_constraints_event_engine_secure_endpoint, nullptr, 0, true,
+     false},
     {"free_large_allocator", description_free_large_allocator,
      additional_constraints_free_large_allocator, nullptr, 0, false, true},
     {"keep_alive_ping_timer_batch", description_keep_alive_ping_timer_batch,
@@ -434,6 +511,10 @@ const ExperimentMetadata g_experiment_metadata[] = {
      true},
     {"local_connector_secure", description_local_connector_secure,
      additional_constraints_local_connector_secure, nullptr, 0, false, true},
+    {"max_inflight_pings_strict_limit",
+     description_max_inflight_pings_strict_limit,
+     additional_constraints_max_inflight_pings_strict_limit, nullptr, 0, true,
+     true},
     {"max_pings_wo_data_throttle", description_max_pings_wo_data_throttle,
      additional_constraints_max_pings_wo_data_throttle, nullptr, 0, true, true},
     {"monitoring_experiment", description_monitoring_experiment,
@@ -467,16 +548,33 @@ const ExperimentMetadata g_experiment_metadata[] = {
      description_schedule_cancellation_over_write,
      additional_constraints_schedule_cancellation_over_write, nullptr, 0, false,
      true},
+    {"secure_endpoint_offload_large_reads",
+     description_secure_endpoint_offload_large_reads,
+     additional_constraints_secure_endpoint_offload_large_reads,
+     required_experiments_secure_endpoint_offload_large_reads, 3, false, true},
+    {"secure_endpoint_offload_large_writes",
+     description_secure_endpoint_offload_large_writes,
+     additional_constraints_secure_endpoint_offload_large_writes,
+     required_experiments_secure_endpoint_offload_large_writes, 3, false, true},
     {"server_global_callbacks_ownership",
      description_server_global_callbacks_ownership,
      additional_constraints_server_global_callbacks_ownership, nullptr, 0,
      false, true},
-    {"server_listener", description_server_listener,
-     additional_constraints_server_listener, nullptr, 0, true, true},
+    {"shard_global_connection_pool", description_shard_global_connection_pool,
+     additional_constraints_shard_global_connection_pool, nullptr, 0, true,
+     true},
+    {"sleep_promise_exec_ctx_removal",
+     description_sleep_promise_exec_ctx_removal,
+     additional_constraints_sleep_promise_exec_ctx_removal, nullptr, 0, false,
+     true},
     {"tcp_frame_size_tuning", description_tcp_frame_size_tuning,
      additional_constraints_tcp_frame_size_tuning, nullptr, 0, false, true},
     {"tcp_rcv_lowat", description_tcp_rcv_lowat,
      additional_constraints_tcp_rcv_lowat, nullptr, 0, false, true},
+    {"tsi_frame_protector_without_locks",
+     description_tsi_frame_protector_without_locks,
+     additional_constraints_tsi_frame_protector_without_locks, nullptr, 0,
+     false, true},
     {"unconstrained_max_quota_buffer_size",
      description_unconstrained_max_quota_buffer_size,
      additional_constraints_unconstrained_max_quota_buffer_size, nullptr, 0,
@@ -487,21 +585,18 @@ const ExperimentMetadata g_experiment_metadata[] = {
 
 #else
 namespace {
-const char* const description_backoff_cap_initial_at_max =
-    "Backoff library applies max_backoff even on initial_backoff.";
-const char* const additional_constraints_backoff_cap_initial_at_max = "{}";
 const char* const description_call_tracer_in_transport =
     "Transport directly passes byte counts to CallTracer.";
 const char* const additional_constraints_call_tracer_in_transport = "{}";
-const char* const description_call_tracer_transport_fix =
-    "Use the correct call tracer in transport";
-const char* const additional_constraints_call_tracer_transport_fix = "{}";
 const char* const description_callv3_client_auth_filter =
     "Use the CallV3 client auth filter.";
 const char* const additional_constraints_callv3_client_auth_filter = "{}";
 const char* const description_chaotic_good_framing_layer =
     "Enable the chaotic good framing layer.";
 const char* const additional_constraints_chaotic_good_framing_layer = "{}";
+const char* const description_chttp2_bound_write_size =
+    "Fix a bug where chttp2 can generate very large writes";
+const char* const additional_constraints_chttp2_bound_write_size = "{}";
 const char* const description_error_flatten =
     "Flatten errors to ordinary absl::Status form.";
 const char* const additional_constraints_error_flatten = "{}";
@@ -540,6 +635,9 @@ const uint8_t required_experiments_event_engine_for_all_other_endpoints[] = {
     static_cast<uint8_t>(
         grpc_core::kExperimentIdEventEngineDnsNonClientChannel),
     static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener)};
+const char* const description_event_engine_secure_endpoint =
+    "Use EventEngine secure endpoint wrapper instead of iomgr when available";
+const char* const additional_constraints_event_engine_secure_endpoint = "{}";
 const char* const description_free_large_allocator =
     "If set, return all free bytes from a \042big\042 allocator";
 const char* const additional_constraints_free_large_allocator = "{}";
@@ -551,6 +649,9 @@ const char* const description_local_connector_secure =
     "Local security connector uses TSI_SECURITY_NONE for LOCAL_TCP "
     "connections.";
 const char* const additional_constraints_local_connector_secure = "{}";
+const char* const description_max_inflight_pings_strict_limit =
+    "If set, the max inflight pings limit is strictly enforced.";
+const char* const additional_constraints_max_inflight_pings_strict_limit = "{}";
 const char* const description_max_pings_wo_data_throttle =
     "Experiment to throttle pings to a period of 1 min when "
     "GRPC_ARG_HTTP2_MAX_PINGS_WITHOUT_DATA limit has reached (instead of "
@@ -602,14 +703,33 @@ const char* const description_schedule_cancellation_over_write =
     "Allow cancellation op to be scheduled over a write";
 const char* const additional_constraints_schedule_cancellation_over_write =
     "{}";
+const char* const description_secure_endpoint_offload_large_reads =
+    "If a large read needs to be decrypted, use a separate thread.";
+const char* const additional_constraints_secure_endpoint_offload_large_reads =
+    "{}";
+const uint8_t required_experiments_secure_endpoint_offload_large_reads[] = {
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineClient),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineSecureEndpoint)};
+const char* const description_secure_endpoint_offload_large_writes =
+    "If a large read write to be encrypted, use a separate thread.";
+const char* const additional_constraints_secure_endpoint_offload_large_writes =
+    "{}";
+const uint8_t required_experiments_secure_endpoint_offload_large_writes[] = {
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineClient),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineListener),
+    static_cast<uint8_t>(grpc_core::kExperimentIdEventEngineSecureEndpoint)};
 const char* const description_server_global_callbacks_ownership =
     "If set, server global callbacks ownership is fixed to not be owned by "
     "gRPC.";
 const char* const additional_constraints_server_global_callbacks_ownership =
     "{}";
-const char* const description_server_listener =
-    "If set, the new server listener classes are used.";
-const char* const additional_constraints_server_listener = "{}";
+const char* const description_shard_global_connection_pool =
+    "If set, shard the global connection pool to improve parallelism.";
+const char* const additional_constraints_shard_global_connection_pool = "{}";
+const char* const description_sleep_promise_exec_ctx_removal =
+    "If set, polling the sleep promise does not rely on the ExecCtx.";
+const char* const additional_constraints_sleep_promise_exec_ctx_removal = "{}";
 const char* const description_tcp_frame_size_tuning =
     "If set, enables TCP to use RPC size estimation made by higher layers. TCP "
     "would not indicate completion of a read operation until a specified "
@@ -619,6 +739,10 @@ const char* const additional_constraints_tcp_frame_size_tuning = "{}";
 const char* const description_tcp_rcv_lowat =
     "Use SO_RCVLOWAT to avoid wakeups on the read path.";
 const char* const additional_constraints_tcp_rcv_lowat = "{}";
+const char* const description_tsi_frame_protector_without_locks =
+    "Do not hold locks while using the tsi_frame_protector.";
+const char* const additional_constraints_tsi_frame_protector_without_locks =
+    "{}";
 const char* const description_unconstrained_max_quota_buffer_size =
     "Discard the cap on the max free pool size for one memory allocator";
 const char* const additional_constraints_unconstrained_max_quota_buffer_size =
@@ -628,16 +752,15 @@ const char* const additional_constraints_unconstrained_max_quota_buffer_size =
 namespace grpc_core {
 
 const ExperimentMetadata g_experiment_metadata[] = {
-    {"backoff_cap_initial_at_max", description_backoff_cap_initial_at_max,
-     additional_constraints_backoff_cap_initial_at_max, nullptr, 0, true, true},
     {"call_tracer_in_transport", description_call_tracer_in_transport,
      additional_constraints_call_tracer_in_transport, nullptr, 0, true, false},
-    {"call_tracer_transport_fix", description_call_tracer_transport_fix,
-     additional_constraints_call_tracer_transport_fix, nullptr, 0, true, true},
     {"callv3_client_auth_filter", description_callv3_client_auth_filter,
      additional_constraints_callv3_client_auth_filter, nullptr, 0, false, true},
     {"chaotic_good_framing_layer", description_chaotic_good_framing_layer,
-     additional_constraints_chaotic_good_framing_layer, nullptr, 0, true, true},
+     additional_constraints_chaotic_good_framing_layer, nullptr, 0, true,
+     false},
+    {"chttp2_bound_write_size", description_chttp2_bound_write_size,
+     additional_constraints_chttp2_bound_write_size, nullptr, 0, false, true},
     {"error_flatten", description_error_flatten,
      additional_constraints_error_flatten, nullptr, 0, false, false},
     {"event_engine_client", description_event_engine_client,
@@ -659,6 +782,9 @@ const ExperimentMetadata g_experiment_metadata[] = {
      description_event_engine_for_all_other_endpoints,
      additional_constraints_event_engine_for_all_other_endpoints,
      required_experiments_event_engine_for_all_other_endpoints, 4, true, false},
+    {"event_engine_secure_endpoint", description_event_engine_secure_endpoint,
+     additional_constraints_event_engine_secure_endpoint, nullptr, 0, true,
+     false},
     {"free_large_allocator", description_free_large_allocator,
      additional_constraints_free_large_allocator, nullptr, 0, false, true},
     {"keep_alive_ping_timer_batch", description_keep_alive_ping_timer_batch,
@@ -666,6 +792,10 @@ const ExperimentMetadata g_experiment_metadata[] = {
      true},
     {"local_connector_secure", description_local_connector_secure,
      additional_constraints_local_connector_secure, nullptr, 0, false, true},
+    {"max_inflight_pings_strict_limit",
+     description_max_inflight_pings_strict_limit,
+     additional_constraints_max_inflight_pings_strict_limit, nullptr, 0, true,
+     true},
     {"max_pings_wo_data_throttle", description_max_pings_wo_data_throttle,
      additional_constraints_max_pings_wo_data_throttle, nullptr, 0, true, true},
     {"monitoring_experiment", description_monitoring_experiment,
@@ -699,16 +829,33 @@ const ExperimentMetadata g_experiment_metadata[] = {
      description_schedule_cancellation_over_write,
      additional_constraints_schedule_cancellation_over_write, nullptr, 0, false,
      true},
+    {"secure_endpoint_offload_large_reads",
+     description_secure_endpoint_offload_large_reads,
+     additional_constraints_secure_endpoint_offload_large_reads,
+     required_experiments_secure_endpoint_offload_large_reads, 3, false, true},
+    {"secure_endpoint_offload_large_writes",
+     description_secure_endpoint_offload_large_writes,
+     additional_constraints_secure_endpoint_offload_large_writes,
+     required_experiments_secure_endpoint_offload_large_writes, 3, false, true},
     {"server_global_callbacks_ownership",
      description_server_global_callbacks_ownership,
      additional_constraints_server_global_callbacks_ownership, nullptr, 0,
      false, true},
-    {"server_listener", description_server_listener,
-     additional_constraints_server_listener, nullptr, 0, true, true},
+    {"shard_global_connection_pool", description_shard_global_connection_pool,
+     additional_constraints_shard_global_connection_pool, nullptr, 0, true,
+     true},
+    {"sleep_promise_exec_ctx_removal",
+     description_sleep_promise_exec_ctx_removal,
+     additional_constraints_sleep_promise_exec_ctx_removal, nullptr, 0, false,
+     true},
     {"tcp_frame_size_tuning", description_tcp_frame_size_tuning,
      additional_constraints_tcp_frame_size_tuning, nullptr, 0, false, true},
     {"tcp_rcv_lowat", description_tcp_rcv_lowat,
      additional_constraints_tcp_rcv_lowat, nullptr, 0, false, true},
+    {"tsi_frame_protector_without_locks",
+     description_tsi_frame_protector_without_locks,
+     additional_constraints_tsi_frame_protector_without_locks, nullptr, 0,
+     false, true},
     {"unconstrained_max_quota_buffer_size",
      description_unconstrained_max_quota_buffer_size,
      additional_constraints_unconstrained_max_quota_buffer_size, nullptr, 0,