]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: quic: delay Retry emission on quic-force-retry
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Fri, 19 Jul 2024 15:37:52 +0000 (17:37 +0200)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Thu, 25 Jul 2024 13:29:50 +0000 (15:29 +0200)
commita72e82c382eff9768c2e04e034a0093102dd487b
tree62e50718c28befeed2acfbe206265c89f2b90acf
parente328056ddc5029af0b34b3c8d757c49b33b7be76
MINOR: quic: delay Retry emission on quic-force-retry

Currently, quic Retry packets are emitted for two different reasons
after processing an Initial without token :
- quic-force-retry is set on bind-line
- an abnormal number of half-open connection is currently detected

Previously, these two conditions were checked separately in different
functions during datagram parsing. Uniformize this by moving
quic-force-retry check in quic_rx_pkt_retrieve_conn() along the second
condition check.

The purpose of this patch is to uniformize datagram parsing stages. It
is necessary to implement quic-initial rules in
quic_rx_pkt_retrieve_conn() prior to any Retry emission. This prevents
to emit unnecessary Retry if an Initial is subject to a reject rule.
src/quic_rx.c