Skip to content

Have a BPF example for QUIC #432

@AltraMayor

Description

@AltraMayor

Soon the QUIC protocol will become an Internet standard; one can track the status of all related RFCs here. Therefore, we need a BPF example for QUIC, so users can support it in their policies.

Questions to consider in the writing of the BPF example:

  1. How to avoid the analog of TCP SYN floods?
  2. The initial QUIC packets have a specific minimum length, so the BPF program could quickly verify this requirement.
  3. What else can be validated in the protocol? For example, is there a way to avoid the equivalent of a TCP SYN+ACK packet going to a listening socket?

Metadata

Metadata

Assignees

No one assigned

    Labels

    DocumentationThe knowledge in the issue should eventually make its way into our documentation

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions