]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: quic: implement quic-initial rules
authorAmaury Denoyelle <adenoyelle@haproxy.com>
Thu, 18 Jul 2024 16:25:43 +0000 (18:25 +0200)
committerAmaury Denoyelle <adenoyelle@haproxy.com>
Thu, 25 Jul 2024 13:39:39 +0000 (15:39 +0200)
commitcafe5966084099fd87cfcaccd1cd17d0c04e1299
treea74cdf333ba861eeeeadd70ce713675a5990478e
parenta72e82c382eff9768c2e04e034a0093102dd487b
MEDIUM: quic: implement quic-initial rules

Implement a new set of rules labelled as quic-initial.

These rules as specific to QUIC. They are scheduled to be executed early
on Initial packet parsing, prior a new QUIC connection instantiation.
Contrary to tcp-request connection, this allows to reject traffic
earlier, most notably by avoiding unnecessary QUIC SSL handshake
processing.

A new module quic_rules is created. Its main function
quic_init_exec_rules() is called on Initial packet parsing in function
quic_rx_pkt_retrieve_conn().

For the moment, only "accept" and "dgram-drop" are valid actions. Both
are final. The latter drops silently the Initial packet instead of
allocating a new QUIC connection.
Makefile
doc/configuration.txt
include/haproxy/action-t.h
include/haproxy/cfgparse.h
include/haproxy/proxy-t.h
include/haproxy/quic_rules.h [new file with mode: 0644]
src/cfgparse-listen.c
src/cfgparse-quic.c
src/proxy.c
src/quic_rules.c [new file with mode: 0644]
src/quic_rx.c