tree 8a270e490badd6f262df7532f56766b98b8fbefd
parent cdddab316f4191456f87252094eabcc05b578298
author dschinazi <dschinazi@google.com> 1629163273 -0700
committer Copybara-Service <copybara-worker@google.com> 1629752992 -0700

Drop QUIC packets with invalid flags

We recently noticed an amplification attack where a QUIC server was receiving non-QUIC packets and responding to them with stateless resets. Since the purpose of stateless reset packets is to notify clients of server state loss, there is no purpose to sending them when the received packet is invalid, as no client could have generated that.

Protected by FLAGS_quic_restart_flag_quic_drop_invalid_flags.

PiperOrigin-RevId: 391182458