daeuniverse / dae

eBPF-based Linux high-performance transparent proxy solution.
GNU Affero General Public License v3.0
2.63k stars 165 forks source link

fix: maintain udp conn direction to fix possible dns leaking #505

Closed mzz2017 closed 2 months ago

mzz2017 commented 2 months ago

Background

In the past (bug brought by #493), the direction of the UDP connection was not maintained, so receiving a return packet would cause all subsequent packets of the same five-tuple to be sent directly, which is not in line with expectations. This PR will fix it.

Checklist

Full Changelogs

Issue Reference

Closes #[issue number]

Test Result