Hi Brayan, I’m not entirely sure I understand your question. Obviously, we have sequence validation in tcp as per rfc 793. For details, see tcp_segment_validate in tcp_input.c. As part of that function, we also check for paws as per rfc 1323/7323.
Hope this helps, Florin > On Dec 29, 2018, at 5:29 AM, brayan ortega <brayan.ortega6...@gmail.com> > wrote: > > Dear VPP Folks, > > I would like to know about sequence number checking functionality. Is this > functionality implemented already? > 1- If yes: Guide me about that > 2- If no : Is there any plan for sequence number checking implementation? it > seems it is essential to prevent sequence number prediction attacks. > > Best Regards, > -=-=-=-=-=-=-=-=-=-=-=- > Links: You receive all messages sent to this group. > > View/Reply Online (#11795): https://lists.fd.io/g/vpp-dev/message/11795 > Mute This Topic: https://lists.fd.io/mt/28880091/675152 > Group Owner: vpp-dev+ow...@lists.fd.io > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [fcoras.li...@gmail.com] > -=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11796): https://lists.fd.io/g/vpp-dev/message/11796 Mute This Topic: https://lists.fd.io/mt/28880091/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-