Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Process all layers before SRH in packet order in endpoints #25

Open
louisroyer opened this issue Oct 21, 2023 · 0 comments
Open

Process all layers before SRH in packet order in endpoints #25

louisroyer opened this issue Oct 21, 2023 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@louisroyer
Copy link
Member

to follow RFC 8200. "a receiver must not, for example, scan through a packet looking for a particular kind of extension header and process that header prior to processing all preceding ones."

In particular before the SRH:

  • if Hop by Hop option -> don't process the header ("it is now expected that nodes along a packet's delivery path only examine and process the Hop-by-Hop Options header if explicitly configured to do so.")
  • if Fragments -> drop + icmp: routers must not fragment/reassemble packets
  • if Destination Options -> depends on 2 first bits of each included Option Type
  • if Authentication -> drop + icmp: unsupported
  • if Encapsulating Security Payload -> drop + icmp: unsupported
  • if unrecognized -> send an ICMP Parameter Problem message to the source of
    the packet, with an ICMP Code value of 1 ("unrecognized Next Header
    type encountered") and the ICMP Pointer field containing the offset
    of the unrecognized value within the original packet.

Layers after SRH are considered payload, independently of the Next Header, and therefore are not processed.

@louisroyer louisroyer added the enhancement New feature or request label Oct 21, 2023
@louisroyer louisroyer self-assigned this Oct 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: Todo
Development

No branches or pull requests

1 participant