tree 90b39dbf16c09a27776730e1a5d27a5c7bd2e90c
parent d5e8c8e71d9e2bd70157750e6ac432663c46d8f8
author QUICHE team <quiche-dev@google.com> 1599748076 -0700
committer Copybara-Service <copybara-worker@google.com> 1599748107 -0700

Self-instrument for QUIC library via setsockopt for on-host-monitoring.

go/secure-protocols-on-host-detection is our design to implement
on-host monitoring for connection tracking. It requires code creating
sockets to tag the socket through an additional syscall. Most of our
traffic is covered through Stubby, but Quic also generates a lot of
traffic and manages raw sockets itself.

This CL should close the monitoring gap for Quic.

Given that we already do setsockopt tagging inside Stubby2 and GRPC (which the GFE uses), we chose not to flag protect this code path, as this is basically a tested feature at this point. Please see CL Discussion.

gfe-relnote: Self-instrument for QUIC library via setsockopt for on-host-monitoring.
PiperOrigin-RevId: 330932821
Change-Id: Ibf83cbdbe6792119b83e702e0f702b22bcb6253d