icmp - #1760

Draft

daniel-noland wants to merge 24 commits into

pr/daniel-noland/bench-harnessfrom

pr/daniel-noland/icmp-and-acl

Commits on Aug 28, 2026

fix(nat): Keep an ICMP error from deleting the Query session it reports on

daniel-noland
and
claude
committed
7792811
test(net): Generate IPv4 options, and stop asserting they cannot happen

daniel-noland
and
claude
committed
7bc4647
test(nat): Pin the recoverable Destination Unreachable code

daniel-noland
and
claude
committed
e664193
test(nat): Measure the IPv6 side of masquerade instead of arguing it

daniel-noland
and
claude
committed
e06a0a0
test(nat): State what the allocator's port ranges mean

daniel-noland
and
claude
committed
f1e5db3
test(nat): Reach the ICMPv6 side of the ICMP error handler

daniel-noland
and
claude
committed
2aa9214
test(routing): State that ECMP spreads, and how a FibEntry classifies itself

daniel-noland
and
claude
committed
1373fd0
test(net): Say which checksums decide an ICMP error, and which does not

daniel-noland
and
claude
committed
de517a3
fix(acl-filter,flow-filter): Match on the protocol the packet carries

daniel-noland
and
claude
committed
05c0d17
test(acl-filter): Prove the over-limit chain is dropped, not guessed

daniel-noland
and
claude
committed
154c045
fix(net): Take ICMPv6 Parameter Problem off the extension-structure list

daniel-noland
and
claude
committed
0031ea3
fix(acl-filter,flow-filter): Refuse a header chain the stage cannot read

daniel-noland
and
claude
committed
d02a146
fix(net): Stop writing the VXLAN header twice in the test fixture

daniel-noland
and
claude
committed
0dc0409
docs(code): Separate the rule from the gap it currently produces

daniel-noland
and
claude
committed
d2d7575
fix(net): Leave a disabled IPv4 UDP quote checksum alone

daniel-noland
and
claude
committed
88164db
fix(nat): Fold a quoted address rewrite into the quoted transport checksum

daniel-noland
and
claude
committed
e4953b1
fix(nat): Store the checksum a quoted identifier translation computes

daniel-noland
and
claude
committed
bc09b33
fix(flow-entry): Decide who holds a key before weighing capacity

daniel-noland
and
claude
committed
d1685e2
fix(nat): Arbitrate the race to create a masquerade flow

daniel-noland
and
claude
committed
daa84ea
fix(nat): Arbitrate the race to create a port-forwarding flow

daniel-noland
and
claude
committed
2cc65d7
fix(flow-entry): Publish a flow as Active before it can be found

daniel-noland
and
claude
committed
51b63d9
fix(nat): Match on the protocol the packet carries

daniel-noland
and
claude
committed
3854671
fix(nat): Key the fresh port-forwarding lookup on the carried protocol too
daniel-noland
committed
c9f0dd5
style(nat): Reach Weak through the concurrency facade
daniel-noland
committed
f5b657d

Navigation Menu

Uh oh!

icmp - #1760

icmp#1760
daniel-noland wants to merge 24 commits into
pr/daniel-noland/bench-harnessfrom
pr/daniel-noland/icmp-and-acl

Commits on Aug 28, 2026

fix(nat): Keep an ICMP error from deleting the Query session it reports on

test(net): Generate IPv4 options, and stop asserting they cannot happen

test(nat): Pin the recoverable Destination Unreachable code

test(nat): Measure the IPv6 side of masquerade instead of arguing it

test(nat): State what the allocator's port ranges mean

test(nat): Reach the ICMPv6 side of the ICMP error handler

test(routing): State that ECMP spreads, and how a FibEntry classifies itself

test(net): Say which checksums decide an ICMP error, and which does not

fix(acl-filter,flow-filter): Match on the protocol the packet carries

test(acl-filter): Prove the over-limit chain is dropped, not guessed

fix(net): Take ICMPv6 Parameter Problem off the extension-structure list

fix(acl-filter,flow-filter): Refuse a header chain the stage cannot read

fix(net): Stop writing the VXLAN header twice in the test fixture

docs(code): Separate the rule from the gap it currently produces

fix(net): Leave a disabled IPv4 UDP quote checksum alone

fix(nat): Fold a quoted address rewrite into the quoted transport checksum

fix(nat): Store the checksum a quoted identifier translation computes

fix(flow-entry): Decide who holds a key before weighing capacity

fix(nat): Arbitrate the race to create a masquerade flow

fix(nat): Arbitrate the race to create a port-forwarding flow

fix(flow-entry): Publish a flow as Active before it can be found

fix(nat): Match on the protocol the packet carries

fix(nat): Key the fresh port-forwarding lookup on the carried protocol too

style(nat): Reach Weak through the concurrency facade