Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Apply the 3x amplification-limit to migration too #4264

Merged
merged 21 commits into from Dec 10, 2020
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
4 changes: 1 addition & 3 deletions draft-ietf-quic-transport.md
Expand Up @@ -2709,9 +2709,7 @@ might also occur because the client's access network used a different NAT
binding for the server's preferred address.

Servers SHOULD initiate path validation to the client's new address upon
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This entire paragraph doesn't seem very specific to "Interaction of Client Migration and Preferred Address"

I think it'd be better to reference the section and not put these normative statements here, since they are so general.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Follow-up Q: Is this SHOULD specific to "Interaction of Client Migration and Preferred Address" or more general? It seems more general, but I don't have a strong opinion.

receiving a probe packet from a different address. Before the client address
is validated, servers MUST NOT send to the address more than three times the
number of bytes that have been received; see {{address-validation}}.
receiving a probe packet from a different address; see {{address-validation}}.

A client that migrates to a new address SHOULD use a preferred address from the
same address family for the server.
Expand Down