[quicwg/base-drafts] How to reject a connection attempt (#3690)

[Marten Seemann <[e-mail]>]

Assume that a server has a blacklist of IP addresses, that it doesn't accept connections from.

One way of implementing this would be to drop all packets from those IP addresses. But this would lead to clients time out, which is sad. Let's say the server wants to be more helpful and allow the client to quickly recover from this situation.
Sending a CONNECTION_CLOSE would seem like the right thing to do in that case. However, we don't have an error code that fits here. SERVER_BUSY is used to reject connection attempts, but it's a bad fit here. Retrying later is not likely to succeed in this case. APPLICATION_ERROR also seems too broad, as it's used for *any* application-level error (in Initial packets).

Do we need a new error code to cover this use case? Something like CONNECTION_REFUSED?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/3690