AltraMayor / AltraMayor/gatekeeper

Have a BPF example for QUIC

未关闭
#432 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
Documentation
主要语言
C
星标
1.6k
派生
252
PR 合并指标
30 天内没有已合并 PR

描述

Soon the QUIC protocol will become an Internet standard; one can track the status of all related RFCs [here](https://datatracker.ietf.org/wg/quic/documents/). Therefore, we need a BPF example for QUIC, so users can support it in their policies.

Questions to consider in the writing of the BPF example:
1. How to avoid the analog of TCP SYN floods?
2. The initial QUIC packets have a specific minimum length, so the BPF program could quickly verify this requirement.
3. What else can be validated in the protocol? For example, is there a way to avoid the equivalent of a TCP SYN+ACK packet going to a listening socket?

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。