Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

quic: enable headers validation in QUICHE #28738

Merged
merged 4 commits into from
Aug 3, 2023

Conversation

danzh2010
Copy link
Contributor

@danzh2010 danzh2010 commented Jul 31, 2023

Commit Message: flip quic_reloadable_flag_quic_act_upon_invalid_header in QUICHE to enable request and response headers validation.

Additional Description: QUICHE reports invalid headers in callback OnInvalidHeaders() and Envoy will act based on configuration. Some invalid requests will be reset immediately instead of receiving 400 response.

Risk Level: high, request pipeline changed
Testing: existing tests
Docs Changes: N/A
Release Notes: changed.
Platform Specific Features: N/A
Runtime guard: envoy.reloadable_features.FLAGS_envoy_quic_reloadable_flag_quic_act_upon_invalid_header

Signed-off-by: Dan Zhang <[email protected]>
Copy link
Contributor

@adisuissa adisuissa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, overall LGTM!
Will it make sense to add a test the disables envoy.reloadable_features.FLAGS_quic_reloadable_flag_quic_act_upon_invalid_header (to ensure that the disable works as intended)?

Assigning Ryan who may have more context here.
/assign @RyanTheOptimist

Signed-off-by: Dan Zhang <[email protected]>
@danzh2010
Copy link
Contributor Author

/assign @RyanTheOptimist

Signed-off-by: Dan Zhang <[email protected]>
@danzh2010
Copy link
Contributor Author

Thanks, overall LGTM! Will it make sense to add a test the disables envoy.reloadable_features.FLAGS_quic_reloadable_flag_quic_act_upon_invalid_header (to ensure that the disable works as intended)?

done

@RyanTheOptimist
Copy link
Contributor

This LGTM, too. Though I wonder how this intersects with UHV, since UHV wants to do all of the header validation locally. I would like to make sure @yanavlasov gives a thumbs up. (Though I think you two may have spoken offline)

/assign @yanavlasov

@danzh2010
Copy link
Contributor Author

This LGTM, too. Though I wonder how this intersects with UHV, since UHV wants to do all of the header validation locally. I would like to make sure @yanavlasov gives a thumbs up. (Though I think you two may have spoken offline)

They should be able to change the override in OnInvalidHeaders() to do nothing based on UHV macro.

@yanavlasov yanavlasov merged commit 8094523 into envoyproxy:main Aug 3, 2023
115 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants