Project

General

Profile

Actions

Feature #7753

open

vxlan: decoder drops packets with non-zero reserved fields

Added by Fupeng Zhao 4 months ago. Updated 11 days ago.

Status:
Resolved
Priority:
Normal
Assignee:
Target version:
Effort:
Difficulty:
Label:
C, Needs Suricata-Verify test, Protocol

Description

The current VXLAN decoder implementation follows RFC draft-mahalingam-dutt-dcops-vxlan-00 too strictly and does not ignore the Reserved fields on receipt, as required by RFC 7348 §5 . This causes valid VXLAN packets with non-zero Reserved bits to be dropped, leading to loss of response-side traffic in some environments.


Files


Subtasks 1 (1 open0 closed)

Feature #7940: vxlan: decoder drops packets with non-zero reserved fields (8.0.x backport)AssignedFupeng ZhaoActions
Actions #1

Updated by Fupeng Zhao 4 months ago

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Fupeng Zhao

Assigned to myself.

I plan to remove the strict validation of the Reserved fields entirely. Since we don’t decode the inner packet before parsing the VXLAN header, we can’t reliably determine the packet direction (transmit vs receive) and thus can’t selectively apply Reserved field checks.

Open to alternative suggestions if there's a preferred way to handle this.

Actions #2

Updated by Fupeng Zhao 4 months ago

  • Status changed from Assigned to In Review
Actions #3

Updated by Philippe Antoine 3 months ago

  • Target version changed from TBD to 9.0.0-beta1
Actions #4

Updated by Philippe Antoine 3 months ago

  • Tracker changed from Bug to Feature
Actions #5

Updated by Fupeng Zhao 13 days ago

  • Status changed from In Review to Closed
Actions #6

Updated by Victor Julien 11 days ago

  • Label Needs backport to 8.0 added
Actions #7

Updated by Victor Julien 11 days ago

  • Status changed from Closed to Resolved
Actions #8

Updated by OISF Ticketbot 11 days ago

  • Subtask #7940 added
Actions #9

Updated by OISF Ticketbot 11 days ago

  • Label deleted (Needs backport to 8.0)
Actions

Also available in: Atom PDF