Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[conntrack] Self-correcting mechanism for existing UDP connections' direction #883

Open
SRodi opened this issue Oct 23, 2024 · 0 comments
Open
Labels
area/ebpf area/flows scope/M Change is Medium type/fix Fixes something

Comments

@SRodi
Copy link
Member

SRodi commented Oct 23, 2024

Currently, for UDP connections that existed before Retina was deployed, conntrack uses a best-effort approach, relying on traffic direction based on the observation point. However, this method can be inaccurate. Implement a self-correcting mechanism in case the direction is incorrect. A possible solution could be using packet size and timing information to infer the direction of the connection.

FYI @nddq

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ebpf area/flows scope/M Change is Medium type/fix Fixes something
Projects
Status: No status
Development

No branches or pull requests

1 participant