[IPv6]Re: Fwd: New Version Notification for draft-herbert-deprecate-eh-00.txt

["Bonica, Ron" <[e-mail]>]

Tom,

I can see why you might want to deprecate the following extension headers on "limited domain boundaries":


  *
Hop-by-hop Options
  *
Destination Options that precede the routing header
  *
Routing header

These extensions headers can harm transit networks if misused.

The Authentication Header hasn't seen much deployment. If you want to deprecate it for that reason, deprecate it. But restricting it to a limited domain doesn't solve any real problem. It doesn't protect the transit network from harm, because the transit network shouldn't even examine it. It doesn't relieve vendors from the cost of maintaining it, because it will still be required inside limited domains.

The Fragment header is fragile. If you want to deprecate it for that reason, deprecate it. But restricting it to a limited domain doesn't solve any real problem. It doesn't protect the transit network from harm, because the transit network shouldn't even examine it. It doesn't relieve vendors from the cost of maintaining it, because it will still be required inside of limited domains. Some operators rely on the fragment header and have no other option. Restricting the fragment header to limited domains will make a fragile mechanism more fragile and will make life worse for those operators.

I don't think that we should deprecate the Destination Option if does not appear before a Routing header. Restricting it to a limited domain doesn't protect the transit network from harm, because the transit network shouldn't even examine it. Moreover, it is potentially useful.

As I final thought, I would be reluctant to support this draft until the IETF has a Standards Track definition of a limited domain.


                                                                       Ron

________________________________
From: Tom Herbert <tom=[e-mail]>
Sent: Friday, December 26, 2025 5:16 PM
To: 6MAN <[e-mail]>
Subject: [IPv6]Fwd: New Version Notification for draft-herbert-deprecate-eh-00.txt

Happy Holidays 6man!

I've posted a new draft on deprecating extension headers on the
Internet. Comment are appreciated!

Thanks,
Tom

---------- Forwarded message ---------
From: <[e-mail]>
Date: Fri, Dec 26, 2025 at 2:14 PM
Subject: New Version Notification for draft-herbert-deprecate-eh-00.txt
To: Tom Herbert <[e-mail]>


A new version of Internet-Draft draft-herbert-deprecate-eh-00.txt has been
successfully submitted by Tom Herbert and posted to the
IETF repository.

Name:     draft-herbert-deprecate-eh
Revision: 00
Title:    Deprecating IPv6 Extension Headers on the Internet
Date:     2025-12-26
Group:    Individual Submission
Pages:    10
URL:      https://urldefense.com/v3/__https://www.ietf.org/archive/id/draft-herbert-deprecate-eh-00.txt__;!!NpxR!iJ1sQxfMiPDQYMZn18vwro6QhGiB_k4p3EvJg7ODewoap9PfftZsk4cvvHTzhpIGg7mnU8PtaH0heh7EWXQLiuQQRp5zUmhp$
Status:   https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-herbert-deprecate-eh/__;!!NpxR!iJ1sQxfMiPDQYMZn18vwro6QhGiB_k4p3EvJg7ODewoap9PfftZsk4cvvHTzhpIGg7mnU8PtaH0heh7EWXQLiuQQRgm9B6Th$
HTMLized: https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-herbert-deprecate-eh__;!!NpxR!iJ1sQxfMiPDQYMZn18vwro6QhGiB_k4p3EvJg7ODewoap9PfftZsk4cvvHTzhpIGg7mnU8PtaH0heh7EWXQLiuQQRpZo_F9M$


Abstract:

   This document describes the deprecation of IPv6 extension headers on
   the Internet with the exception of Encapsulating Security Payload.
   Deprecation is motivated by three factors: 1) the data shows high
   discard rates for packets with extension headers sent over the
   Internet, 2) extension headers can be used for Denial of Service
   attack and are replete with other security vulnerabilities, 3) the
   high loss rates are a disincentive to develop new extension headers
   or options that might be useful or fix known problems.  This document
   recommends that extension headers, other than Encapsulating Security
   Payload, be relegated to use only in limited domains and that packets
   with extension headers should be discarded at boundary routers of
   limited domains.



The IETF Secretariat

--------------------------------------------------------------------
IETF IPv6 working group mailing list
[e-mail]
List Info: https://urldefense.com/v3/__https://mailman3.ietf.org/mailman3/lists/[e-mail]/__;!!NpxR!iJ1sQxfMiPDQYMZn18vwro6QhGiB_k4p3EvJg7ODewoap9PfftZsk4cvvHTzhpIGg7mnU8PtaH0heh7EWXQLiuQQRnxNN22L$
--------------------------------------------------------------------