Christophe Guillon

I've proposed a pull request for this. "Implement retransmission of packet on peer request". https://github.com/msoulier/tftpy/pull/58 The reported issue is actually due to an incomplete implementation of the protocol as per...

Indeed, u-boot tftp client, implements a timeout policy waiting for peer packets, and when a timeout occurs, ask for the expected packet to be resent as described in the protocol....

Note that this pull request was never treated, while it fixes an unresolved (but closed) issue #1090. Maybe one should re-open the issue #1090, or should I add a new...

@arkodg > would be a right place to add the invalid rule only for the specified interface in the `FORWARD` chain Unfortunately, invalid packets, including benign out-of-window packets must be...

Seems odd, but I will verify this again, thanks for the pointer.

I can confirm that adding the rules in the FORWARD chain does not work. From my experiments the fix done in `kube-proxy` does not solve the issue, either they did...

@arkodg I have forked a testbench for the kubernetes issue which I modified to exhibit the issue solved by this pull request. Get it at : https://github.com/guillon/k8s-issue-74839 If you can...

@thaJeztah I still have to exhibit the problem under kubernetes, in order to sort things out, I'm working on it... Actually with the initial testbench from k8s, as the server...

Actually, when installing kubernetes on some physical Ubuntu hosts as described in https://vitux.com/install-and-deploy-kubernetes-on-ubuntu/, the kubernetes networking does not use NAT, hence I can't reproduce the issue over kubernetes. I may...

Indeed the filtering can't be done on docker0, all invalid packets in conntrack need to be dropped. The first routing decision in your diagram is that an invalid packet in...