Thank you for this report, Martin. On Thu, Nov 05, 2020 at 08:13:32PM +1100, Martin Thomson wrote: > One thing that is hard to determine from my testing is that no > implementations (other than my own) seems to send probes on the > old path after the client migrates to the preferred address. > This is probably OK, because my address isn't changing, or at > least the port is the only change. However, it's not clear > that we have reliable implementations of that anti-DoS measure.
Here you must refer to Section 9.3.3: Off-Path Packet Forwarding. I have to admit I had to go back to the draft and re-read the Migration section to find the requirement you alluded to. Even though that section has been in the transport draft for two years, we missed it and lsquic does not validate the old path. One more item for the TODO list! - Dmitri.
