Skip to content

Server does not send PATH_CHALLENGE when client address changes #429

@larseggert

Description

@larseggert

When the client's source address changes (e.g., due to NAT rebinding), mvfst starts responding to the new address without sending a PATH_CHALLENGE frame to validate the new path, but RFC9000 requires this.

This was observed using the QUIC interop runner with mvfst as the server and neqo as the client, running the rebind-addr test case. The data transfer itself succeeds — the full 10MB file is downloaded across two address rebinds. However, the test harness reports:

First server packet on new path (('193.167.100.100', 443), ('193.167.0.224', 59022)) did not contain a PATH_CHALLENGE frame

The server's first packet to the new client address contains only an ACK frame, with no PATH_CHALLENGE.

rebind-addr.zip

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions