Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
28 commits
Select commit Hold shift + click to select a range
248b654
fix(nat): preserve query flows after ICMP errors
daniel-noland Aug 22, 2026
cb05f14
test(net): generate IPv4 header options
daniel-noland Aug 22, 2026
3df56ac
test(nat): preserve flows after fragmentation-needed errors
daniel-noland Aug 22, 2026
5cd45ee
test(nat): cover IPv6 masquerade round trips
daniel-noland Aug 22, 2026
e1614dd
test(nat): verify allocator port-range summaries
daniel-noland Aug 22, 2026
6306175
test(nat): cover ICMPv6 error handling
daniel-noland Aug 22, 2026
3831128
test(routing): verify ECMP distribution and classification
daniel-noland Aug 22, 2026
70b6de4
test(net): isolate ICMP error checksum rules
daniel-noland Aug 22, 2026
703d493
fix(filters): match IPv6 rules on the upper-layer protocol
daniel-noland Aug 22, 2026
a5190b9
test(acl-filter): drop overlong IPv6 extension chains
daniel-noland Aug 22, 2026
4338a04
test(net): verify ICMP extension types and quoted-packet lengths
daniel-noland Aug 22, 2026
9ce9d06
fix(filters): reject packet layers they do not handle
daniel-noland Aug 22, 2026
d1a0ae3
fix(net): reject tagged VXLAN payloads at decapsulation
daniel-noland Aug 22, 2026
a184a6d
chore(dataplane): clarify the VLAN rejection log message
daniel-noland Aug 22, 2026
1e310a9
fix(net): preserve disabled IPv4 UDP checksums in quotes
daniel-noland Aug 26, 2026
d516155
fix(nat): update quoted checksums after address rewrites
daniel-noland Aug 26, 2026
7acec5d
fix(nat): store checksums after quoted identifier rewrites
daniel-noland Aug 26, 2026
c6f079b
test(nat): verify masquerade flow-creation race handling
daniel-noland Aug 26, 2026
2975326
test(nat): preserve port-forward flow pairs across a burst
daniel-noland Aug 26, 2026
2ada8b8
fix(nat): match IPv6 NAT rules on upper-layer protocols
daniel-noland Aug 27, 2026
150e571
fix(nat): use the upper-layer protocol for new flow lookup
daniel-noland Aug 28, 2026
10a1e3a
style(nat): import Weak through the concurrency facade
daniel-noland Aug 28, 2026
1ded424
fix(net): check IPv6 fragment offsets during protocol lookup
daniel-noland Sep 15, 2026
a6de0e5
fix(net): keep the payload length when IPv4 options change
daniel-noland Sep 15, 2026
3a626db
test(flow-filter): distinguish missing IP from unresolved protocol
daniel-noland Sep 15, 2026
8ba2189
fix(net): reject non-first fragments across extension chains
daniel-noland Sep 17, 2026
ca7b99c
fix(net): distinguish fragments from incomplete header chains
daniel-noland Sep 20, 2026
01dd1b9
fix(nat): reject non-first fragments before masquerading
daniel-noland Sep 20, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .duvet/config.toml
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,6 @@ enabled = true

[[specification]]
source = "https://www.rfc-editor.org/rfc/rfc4787"

[[specification]]
source = "https://www.rfc-editor.org/rfc/rfc5508"

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

109 changes: 109 additions & 0 deletions .duvet/requirements/www.rfc-editor.org/rfc/rfc5508/section-3.1.toml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading