Ondrej Zajicek 99872676df BFD: Improve incoming packet matching ...

For active sessions, ignore received packets with zero local id and
mismatched remote id. That forces a session timeout instead of an
immediate session restart. It makes BFD sessions more resilient to
packet spoofing.

Thanks to André Grüneberg for the suggestion.

2023-01-22 23:42:08 +01:00

13 KiB

Raw Blame History

View Raw