]> git.kaiwu.me - nginx.git/commit
QUIC: fixed anti-amplification with explicit send.
authorRoman Arutyunyan <arut@nginx.com>
Wed, 22 Nov 2023 10:52:21 +0000 (14:52 +0400)
committerRoman Arutyunyan <arut@nginx.com>
Wed, 22 Nov 2023 10:52:21 +0000 (14:52 +0400)
commit6c78bb9bb1ccbf91f5f059c13a82badea529012a
treed71cac4f8adb32c40ee21d46efa94e13e9c45527
parent0efe8db1d0c331bad799dcaa0b2a24e739f26c98
QUIC: fixed anti-amplification with explicit send.

Previously, when using ngx_quic_frame_sendto() to explicitly send a packet with
a single frame, anti-amplification limit was not properly enforced.  Even when
there was no quota left for the packet, it was sent anyway, but with no padding.
Now the packet is not sent at all.

This function is called to send PATH_CHALLENGE/PATH_RESPONSE, PMTUD and probe
packets.  For all these cases packet send is retried later in case the send was
not successful.
src/event/quic/ngx_event_quic_migration.c
src/event/quic/ngx_event_quic_output.c