-
Notifications
You must be signed in to change notification settings - Fork 4.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
quic: enable headers validation in QUICHE #28738
Conversation
Signed-off-by: Dan Zhang <[email protected]>
Signed-off-by: Dan Zhang <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks, overall LGTM!
Will it make sense to add a test the disables envoy.reloadable_features.FLAGS_quic_reloadable_flag_quic_act_upon_invalid_header
(to ensure that the disable works as intended)?
Assigning Ryan who may have more context here.
/assign @RyanTheOptimist
Signed-off-by: Dan Zhang <[email protected]>
/assign @RyanTheOptimist |
Signed-off-by: Dan Zhang <[email protected]>
done |
This LGTM, too. Though I wonder how this intersects with UHV, since UHV wants to do all of the header validation locally. I would like to make sure @yanavlasov gives a thumbs up. (Though I think you two may have spoken offline) /assign @yanavlasov |
They should be able to change the override in OnInvalidHeaders() to do nothing based on UHV macro. |
Commit Message: flip quic_reloadable_flag_quic_act_upon_invalid_header in QUICHE to enable request and response headers validation.
Additional Description: QUICHE reports invalid headers in callback
OnInvalidHeaders()
and Envoy will act based on configuration. Some invalid requests will be reset immediately instead of receiving 400 response.Risk Level: high, request pipeline changed
Testing: existing tests
Docs Changes: N/A
Release Notes: changed.
Platform Specific Features: N/A
Runtime guard: envoy.reloadable_features.FLAGS_envoy_quic_reloadable_flag_quic_act_upon_invalid_header