[IPv6]Re: ICMP Query and ICMP Query for IOAM

[[e-mail]]

Hi Sebastian,

Thank you for the review and good comments.
As Ron has replied, we'll incorporate your comments into the next revision.
Just one reminder, draft-ietf-6man-icmpv6-ioam-conf-state-10 provides some examples of actual queries for you to assess.
Cheers,
Xiao Min


Original


From: SebastianMoeller <[e-mail]>
  
To: 肖敏10093570;
  
Cc: [e-mail] <[e-mail]>;[e-mail] <[e-mail]>;
Date: 2026年02月25日 18:14
  
Subject: Re: [IPv6]ICMP Query and ICMP Query for IOAM
  


Hi,
 
quick note:
 
The draft states:
To prevent denial of service attacks, the ICMP Query Response message MUST NOT be longer than the corresponding ICMP Query Request message.
 
IMHO this reasonable requirement does prevent amplification more than it inhibits denial of service attacks... How well this lends itself to denial of service attacks (on the queried host), IMHO, depends more on how costly the requested pieces of information are to gather... and since the draft refers to another (not yet written?) draft for the actual queries this is hard to assess.
For using this to create reflection attacks on other hosts this size limit really also only affects the effective amplification when using that attack vector, but if an attacker commands enough nodes no amplification is required to create a denial of service attack. So I would just rephrase that sentence from "To prevent denial of service attacks,..." to "To remove to potential of abusing this as a means of attack amplification,..." 
 
Regards
    Sebastian
 
 
 
 
> On 25. Feb 2026, at 09:10, [e-mail] wrote:
>  
> Dear all,
>  
> A new document draft-xbm-intarea-icmp-query-00 has been submitted. This draft introduces two new ICMP messages (ICMP Query Request/Response) for the purpose of IP node information query.
> After that, draft-ietf-6man-icmpv6-conf-state was updated and its basis was changed from RFC 4620 to draft-xbm-intarea-icmp-query.
> Links for the two drafts are as below.
> https://datatracker.ietf.org/doc/html/draft-xbm-intarea-icmp-query-00 https://datatracker.ietf.org/doc/html/draft-ietf-6man-icmpv6-ioam-conf-state-10  
> Looking forward to your review and comments.
>  
> Cheers,
> Xiao Min
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> [e-mail]
> List Info: https://mailman3.ietf.org/mailman3/lists/[e-mail]/
> --------------------------------------------------------------------