cablelabs / transparent-security

Transparent Security is a solution for identify the source devices of a DDoS attack and mitigates the attack in the customer premises or the access network. This solution leverages a P4 based programmable data plane for add in-band network telemetry (INT) for device identification and in-band mitigation.
https://www.cablelabs.com/vaccinate-your-network-to-prevent-the-spread-of-ddos-attacks
Apache License 2.0
32 stars 4 forks source link

bridge_metadata requires a better means to determine whether or not it exists on core_tna.p4 #385

Closed spisarski closed 3 years ago

spisarski commented 3 years ago

When adding the metadata between stages on core_tna.p4 for determining that a packet has been mirrored is pretty bad as we are only placing extra metadata on mirrored packets. We should ensure that not only mirrored packets get the metadata, but also the original ones too.