Re: L=0 [was draft-pioxfolks-6man-pio-exclusive-bit-02.txt]

[Mikael Abrahamsson <[e-mail]>]

On Thu, 1 Feb 2018, Lorenzo Colitti wrote:

> Are you talking about something that's not standardized? All the SAVI 
> RFCs that I have seen track individual addresses.

You're right, it seems work was started but never finished:

https://www.ietf.org/proceedings/77/slides/savi-1.pdf

I thought this was completed. Pity.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/15-s/ip6f-15-s-book/ip6-src-guard.html

It looks like Cisco has support for DHCPv6-PD source guard, but it looks 
like this was never standardized in the IETF (SAVI). I'm sure other 
vendors have this functionality as well, as this is an obvious requirement 
from potential customers with the need of these first-hop security 
features.

It's similar to the fact that DHCPv6 relay snooping and route installation 
for PD was never standardized, but most vendors have this functionality 
anyway.

I have several times in the past few years brought up SAVI and that we 
should take this into account when we design protocols, but I have been 
met with no interest what so ever so far. I still haven't given up hope 
that this will change, because I think it's an important functionality to 
have, even if some people think it's a protocol layer violation (which is 
one of the arguments I have been met with before).

-- 
Mikael Abrahamsson    email: [e-mail]