IETF Logo Mail Archive

Re: IPv6 Anycast has been killed by LINUX patch in 2016 - who cares?

Töma Gavrichenkov <ximaera@gmail.com> Sun, 08 August 2021 15:12 UTC

Return-Path: <ximaera@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93A443A3090; Sun, 8 Aug 2021 08:12:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NEKTVwILoYLG; Sun, 8 Aug 2021 08:12:24 -0700 (PDT)
Received: from mail-ed1-x52b.google.com (mail-ed1-x52b.google.com [IPv6:2a00:1450:4864:20::52b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C67083A308E; Sun, 8 Aug 2021 08:12:23 -0700 (PDT)
Received: by mail-ed1-x52b.google.com with SMTP id x90so20676017ede.8; Sun, 08 Aug 2021 08:12:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=E96iJg4RyBdzkp2zRUX58qamIsiwA74lRJJGgyjuf0s=; b=dy/ZWwv3gYiXkB8B1iSk7YfZpWdVPQkze2C5EASiHIQ7CGfldKVITxarBaFBr3SecS IMuyYvvQN/yuQRnS3bEDKOQ7gJwSwEQdjuR/PzRbdvBcvk4F5OBu6us1athNadhucSDo 7OtkXGpY1bjkTAXYKWPc8NYSOYv1sdXWQS6YaKk5e8eNjYMPhKcz6HM5msNn40agAWfZ ZVSxwlAknSAV1aYZjHOLUJtQBFIcSdLLdgWpdpZFCcQE3uygEtW3ZKCEcNBAtu0KMITH 86DuAJ+Ll2ARfjJWEjQ+iCJkzh9/R5KUUOMkULqBSt8I/4+g8OsXCkkCIU3cS2XNNN2p J+7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=E96iJg4RyBdzkp2zRUX58qamIsiwA74lRJJGgyjuf0s=; b=OWd2UHHLKaHdfpHGQ1QUsB9qDI165a42QDko9YupwXWfFfO1UJ8XEVnKUE8HiiH+pA jwYq+90hT042PLFsA8VVbzdEPIn2q1PnfWNew9hCm0uZUn9+S9Y6yG1to+SWJs4srd58 AAq+xLphRQkOlGDU3prlD2gTMvT0I0seDWrsN69giaugFkNNypxzqcdQ+dKHm+6MAq+T EpNKG+qGeY2PDitMQSjXtg7VBmfrx7azjNtIBt/hGQvhoS4qul4uhLs/2dDITtuKbHU5 JCkU+99o9LPj9OzFBiCLrG/k0n/o99OtBG6jB7ms6iwBdOmRMt53eoQxUgx/SaFVk3fq sVIw==
X-Gm-Message-State: AOAM5334Zfkjvt2JFt61n5yYR8m5As99XPi0w+rnscxTuEKlJcwHstH6 TbORKOtcvVpSHDE0qdGqe8fHH3byUreZ4j4fdKM=
X-Google-Smtp-Source: ABdhPJyn/qFksG6vwPGnpuVHzE8X90hblYMATzkJGfLWrzWwdKQDSgFthnY+Vxpgj1Z/WNNMPcFWSuCrtPj3Pbob6LU=
X-Received: by 2002:a05:6402:5251:: with SMTP id t17mr19769348edd.157.1628435540642; Sun, 08 Aug 2021 08:12:20 -0700 (PDT)
MIME-Version: 1.0
References: <db8c1a5534e9412ebcfa37682d75f862@huawei.com> <C23D7023-B5B7-47C6-8AC5-65A98822A724@lurchi.franken.de> <CANMZLAZGawUjRhSSE_rA8AyqMx=mx1WFeJ_tZq0KVEXJd2XBfQ@mail.gmail.com> <20210807014730.GA28901@faui48f.informatik.uni-erlangen.de> <CAO42Z2yezZh5-B0PwCuNt2FUMAW-FjMK8QZ8uL4TsPhs26zziw@mail.gmail.com> <20210807151716.GA3098@faui48f.informatik.uni-erlangen.de> <CALZ3u+a_7XQ+R8mV+9KzwRwxa0riP-QD_2R69ycV0NL9jy_S3Q@mail.gmail.com> <20210807175410.GA63079@faui48f.informatik.uni-erlangen.de> <CALx6S36b33LD_hNFvptOJuny4g98=dhq3RtKsGeLx3ks-yYjFg@mail.gmail.com> <6F63D7FE-8768-4BD8-846E-61E50E44228F@lurchi.franken.de> <CALx6S36pbw2angEmDpu5DnX2nix9KgxFs7ExU17x+JXQFs23TA@mail.gmail.com> <CALZ3u+Yt2X3faSVW7K0eaxmaQy6iA6p4=f0c4E_F4CP0tfjHYw@mail.gmail.com> <CALx6S343sL0=5wUTRSXMnhSamjTTZU=DzA9Y+dbJ4NRTu0_83w@mail.gmail.com> <CALZ3u+ad6Cecp4T+wfuKVJ4ZmnQvaCSX2njFPCN8DuctrU6uew@mail.gmail.com> <CALx6S37u=y1wX8+6d8aX-6=N1MFEqO9RwxQN5zhZnS4DLM8DcA@mail.gmail.com> <CALZ3u+bHbsdzQsHOHx-6nEe6yQBbHMDhH9_PWB=WHTchB8tj5w@mail.gmail.com> <CALx6S36MpCOh2mR+cfM__ASTdn9c4CuhxUrCnUgEv1WhORLyRg@mail.gmail.com> <CALZ3u+ZyQKUJc__HWu6drNyLSCJJ8bOsLfg1B18xwB9+HMe8GA@mail.gmail.com> <CALx6S366bXkCsyEkWCONBX5kcB9JzHU=aNF9hd+wT9FcTdShFw@mail.gmail.com>
In-Reply-To: <CALx6S366bXkCsyEkWCONBX5kcB9JzHU=aNF9hd+wT9FcTdShFw@mail.gmail.com>
From: Töma Gavrichenkov <ximaera@gmail.com>
Date: Sun, 08 Aug 2021 18:12:07 +0300
Message-ID: <CALZ3u+aP=v_1=w1xqfEKof7Cc6Ba3pwOYV3O=0b=NxS4hRWhiA@mail.gmail.com>
Subject: Re: IPv6 Anycast has been killed by LINUX patch in 2016 - who cares?
To: Tom Herbert <tom@herbertland.com>
Cc: Michael Tuexen <Michael.Tuexen@lurchi.franken.de>, 6man WG <ipv6@ietf.org>, IETF discussion list <ietf@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000f08e4505c90db182"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/LeuaN254-G0FaZFQkEfhK2A7BQ8>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Aug 2021 15:12:29 -0000

Peace,

On Sun, Aug 8, 2021, 6:05 PM Tom Herbert <tom@herbertland.com> wrote:

> DNS can return different addresses to users in different geographic
>>> regions, mirrors have long been used for file download.
>>>
>>
>> And the cybercriminal would just take down all of these unicast addresses
>> with a DDoS, one by one, until so many scrubbing centers are down that the
>> rest cannot handle the traffic, resulting in a domino effect.
>>
>> No, that doesn't work.
>>
>
> And yet these have techniques have been successfully deployed for many
> years. Not every address seen on the Internet is anycast.
>

Not every address ever gets attacked, and when there's an attack, it isn't
_always_ complicated.

And there's no incentive now for the criminals to do research in that
matter because with TCP working fine over anycast, it's too complicated to
overcome the traffic engineering obstacles.

Take anycast out of the game, the situation would change.

--
Töma

>

v2.23.0 | Report a Bug | By Email