microsoft / microsoft/retina

[conntrack] Self-correcting mechanism for existing UDP connections' direction

Open
#883 0 comments 0 reactions 0 assignees View on GitHub
area/ebpf area/flows scope/M type/fix
Dominant language
Go
Stars
3.2k
Forks
304
Avg merge
1d 16h
Merged PRs (30d)
79

Description

Currently, for UDP connections that existed before Retina was deployed, conntrack uses a best-effort approach, relying on traffic direction based on the observation point. However, this method can be inaccurate. Implement a self-correcting mechanism in case the direction is incorrect. A possible solution could be using packet size and timing information to infer the direction of the connection.

FYI @nddq

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.