What Routers Do When Dropping UDP Packets

This article explains the default behavior of a network router when it drops a User Datagram Protocol (UDP) packet. Because UDP is a connectionless, best-effort protocol, routers do not provide delivery guarantees. When a router cannot process or forward a UDP packet, its standard behavior is to silently discard the datagram without attempting retransmission, occasionally generating an Internet Control Message Protocol (ICMP) message depending on the specific cause of the drop.

Silent Discard During Network Congestion

The most common reason a router drops a UDP packet is network congestion. When traffic exceeds the bandwidth of an egress interface or the router’s internal buffer (queue) fills up, the router applies queue management techniques such as Tail Drop or Random Early Detection (RED).

In this scenario, the default behavior is a silent discard. The router simply purges the packet from its memory buffer. It does not notify the sender, it does not notify the receiver, and it makes no attempt to buffer the packet for later delivery.

Lack of Layer 4 Retransmission

Unlike Transmission Control Protocol (TCP), UDP does not feature flow control, error recovery, or acknowledgment mechanisms (ACKs). * The router operates at Layer 3 (Network Layer) and handles routing based on IP headers. * The router has no mechanism to request retransmission of UDP data. * The router does not maintain state information regarding UDP communication streams.

Once a UDP datagram is dropped by a router, that specific instance of data is permanently lost at the network transit level.

Conditional ICMP Error Messages

While congestion results in silent deletion, certain administrative or routing failures cause the router to generate an ICMP message back to the source IP address by default:

• TTL Expiration: If a UDP packet’s Time-to-Live (TTL) or Hop Limit counter reaches zero, the router drops the packet and sends an ICMP Type 11 (Time Exceeded) packet back to the source.
• No Route to Host: If the router has no matching route in its routing table for the destination IP, it drops the datagram and returns an ICMP Type 3, Code 0 (Destination Network Unreachable) or Code 1 (Host Unreachable).
• MTU Exceeded with Don’t Fragment (DF) Flag: If the packet size exceeds the outgoing interface’s Maximum Transmission Unit (MTU) and the DF bit is set, the router drops the packet and returns an ICMP Type 3, Code 4 (Fragmentation Needed and DF Set).
• Access Control List (ACL) Blocks: If an administrative filter or firewall rule on the router denies the UDP traffic, it may drop the packet silently or return an ICMP Type 3, Code 13 (Communication Administratively Prohibited).

Most modern routers rate-limit the generation of ICMP error messages to protect their own CPU performance and prevent denial-of-service (DoS) amplification.

Application-Layer Impact

Because the router provides no recovery mechanisms for dropped UDP packets, handling lost data falls entirely on the endpoint applications. Applications using UDP—such as DNS, VoIP, video streaming, and online gaming—must either tolerate missing packets natively or implement their own sequence numbering, timeout, and retransmission logic at Layer 7.