Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

http: allow trigger GOAWAY from l7 filters #36306

Open
wants to merge 18 commits into
base: main
Choose a base branch
from

Conversation

botengyao
Copy link
Member

@botengyao botengyao commented Sep 24, 2024

Commit Message: allow decoding filter trigger the connection level GOAWAY.
Additional Description: This is usually useful for dropping traffic more aggressively, especially for some attacks.
Risk Level: low
Testing: integration test

Copy link

As a reminder, PRs marked as draft will not be automatically assigned reviewers,
or be handled by maintainer-oncall triage.

Please mark your PR as ready when you want it to be reviewed!

🐱

Caused by: #36306 was opened by botengyao.

see: more, trace.

@botengyao botengyao marked this pull request as ready for review October 1, 2024 16:03
@botengyao
Copy link
Member Author

/retest

@botengyao
Copy link
Member Author

botengyao commented Oct 1, 2024

/assign @yanavlasov

1 similar comment
@botengyao
Copy link
Member Author

/assign @yanavlasov

Copy link
Contributor

@yanavlasov yanavlasov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/wait

source/common/http/conn_manager_impl.cc Outdated Show resolved Hide resolved
source/common/http/conn_manager_impl.h Outdated Show resolved Hide resolved
envoy/http/filter.h Outdated Show resolved Hide resolved
@botengyao
Copy link
Member Author

/retest

Signed-off-by: Boteng Yao <[email protected]>
Signed-off-by: Boteng Yao <[email protected]>
@botengyao
Copy link
Member Author

/retest

@KBaichoo
Copy link
Contributor

KBaichoo commented Nov 5, 2024

/wait

@botengyao this needs a main merge.

Copy link
Contributor

@yanavlasov yanavlasov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/wait-any

/**
* Attempt to send GOAWAY and close the connection, and no filter chain will move forward.
*/
virtual void sendGoAwayAndClose() PURE;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can encoder filter send goaway?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good point and no, kinda want to add the support incrementally, but added the handler for the encoder chain as well.

Signed-off-by: Boteng Yao <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants