fix(flow-filter): verify a masquerade destination, do not resolve it - #1689

Closed

daniel-noland wants to merge 8 commits into

pr/daniel-noland/quick-fix-fuzz-and-printfrom

pr/daniel-noland/masquerade-verification-v2

Commits on Aug 4, 2026

test(flow-filter): carry the config oracle through to packet metadata

daniel-noland
and
claude
committed
ac2357d
test(flow-filter): fuzz the NF's parser-facing edge with arbitrary header stacks

daniel-noland
and
claude
committed
0f13414
test(flow-filter): generate exclusion prefixes, so exposes reach the tables as fans

daniel-noland
and
claude
committed
c59e57c
test(flow-filter): pin three edges the property suites reach but never state

daniel-noland
and
claude
committed
50c691b
fix(flow-filter): bound rte_acl table names for every counter value

daniel-noland
and
claude
committed
eb430f2
refactor(flow-filter): state the single-key lookup sequence once

daniel-noland
and
claude
committed
72eef15
fix(flow-filter): verify a masquerade destination, do not resolve it

daniel-noland
and
claude
committed
3284b86
test(flow-filter): generate cross-peering masquerade overlaps

daniel-noland
and
claude
committed
5194e24