Effect on stateless resets about load-balancers HOT 4 CLOSED

I don't understand the attack here. A given CID will deterministically map to a specific server instance. So there is no way for another server to receive a packet with that CID and generate a stateless reset. What am I missing?

There might be something here with the differing treatment of long-header vs. short-header packets, (and the option for servers to send resets on long headers), but I'll have to think about it more.

from load-balancers.

As to the last point, nope: even a long header with a DCID that conforms to the server's expectations (i.e. maps to a real server) will get delivered to that server, so I don't think that's an attack.

from load-balancers.

@martinthomson Should we talk about this issue more, or are you satisfied enough that I can close it?

from load-balancers.

I don't see any mention of stateless reset in the draft at all. That's probably something worth addressing, even if it is to say what you have already.

from load-balancers.