Skip to content

Close connection with CONNECTION_ID_LIMIT_ERROR when peer exceeds act…#460

Open
UditDewan wants to merge 1 commit into
facebook:mainfrom
UditDewan:fixed-connection-id-limit-error
Open

Close connection with CONNECTION_ID_LIMIT_ERROR when peer exceeds act…#460
UditDewan wants to merge 1 commit into
facebook:mainfrom
UditDewan:fixed-connection-id-limit-error

Conversation

@UditDewan

Copy link
Copy Markdown

…ive_connection_id_limit

Per RFC 9000 Section 5.1.1, after processing a NEW_CONNECTION_ID frame, if the number of active connection IDs exceeds the advertised active_connection_id_limit, an endpoint MUST close the connection with an error of type CONNECTION_ID_LIMIT_ERROR. mvfst previously ignored such frames silently, based on behavior that was unspecified as of draft-23.

  • Add the missing CONNECTION_ID_LIMIT_ERROR (0x09) code from RFC 9000 to TransportErrorCode, with toString support.
  • Return a connection error from updateSimpleFrameOnPacketReceived instead of dropping the frame when the limit is exceeded.
  • Update client and server transport tests to expect the connection close.

Fixes #320

…ive_connection_id_limit

Per RFC 9000 Section 5.1.1, after processing a NEW_CONNECTION_ID frame,
if the number of active connection IDs exceeds the advertised
active_connection_id_limit, an endpoint MUST close the connection with
an error of type CONNECTION_ID_LIMIT_ERROR. mvfst previously ignored
such frames silently, based on behavior that was unspecified as of
draft-23.

- Add the missing CONNECTION_ID_LIMIT_ERROR (0x09) code from RFC 9000
  to TransportErrorCode, with toString support.
- Return a connection error from updateSimpleFrameOnPacketReceived
  instead of dropping the frame when the limit is exceeded.
- Update client and server transport tests to expect the connection
  close.

Fixes facebook#320
@meta-cla meta-cla Bot added the CLA Signed Do not delete this pull request or issue due to inactivity. label Jun 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed Do not delete this pull request or issue due to inactivity.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Mvfst server does not close the connection when the client sends NEW_CONNECTION_ID frames that exceed the server's active_connection_id_limit.

1 participant