[IPv6]Re: [Int-area] Re: ICMP Query and ICMP Query for IOAM

["Bonica, Ron" <[e-mail]>]

Sebastian,

Good catch!

We should also mention the other point that you raise in an operational consideration section.

                                                Ron


________________________________
From: Sebastian Moeller <moeller0=[e-mail]>
Sent: Wednesday, February 25, 2026 5:14 AM
To: [e-mail] <[e-mail]>
Cc: [e-mail] <[e-mail]>; [e-mail] <[e-mail]>
Subject: [Int-area] Re: [IPv6]ICMP Query and ICMP Query for IOAM

Hi,

quick note:

The draft states:
To prevent denial of service attacks, the ICMP Query Response message MUST NOT be longer than the corresponding ICMP Query Request message.

IMHO this reasonable requirement does prevent amplification more than it inhibits denial of service attacks... How well this lends itself to denial of service attacks (on the queried host), IMHO, depends more on how costly the requested pieces of information are to gather... and since the draft refers to another (not yet written?) draft for the actual queries this is hard to assess.
For using this to create reflection attacks on other hosts this size limit really also only affects the effective amplification when using that attack vector, but if an attacker commands enough nodes no amplification is required to create a denial of service attack. So I would just rephrase that sentence from "To prevent denial of service attacks,..." to "To remove to potential of abusing this as a means of attack amplification,..."

Regards
        Sebastian




> On 25. Feb 2026, at 09:10, [e-mail] wrote:
>
> Dear all,
>
> A new document draft-xbm-intarea-icmp-query-00 has been submitted. This draft introduces two new ICMP messages (ICMP Query Request/Response) for the purpose of IP node information query.
> After that, draft-ietf-6man-icmpv6-conf-state was updated and its basis was changed from RFC 4620 to draft-xbm-intarea-icmp-query.
> Links for the two drafts are as below.
> https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-xbm-intarea-icmp-query-00__;!!NpxR!j6oKYNANTA9WORuGLBq22srq3D5NQDh4ERJsioDhO0RuCR00J_4tAZRm-FwqH5LGTMGFtsecWrtj93ZzwanJieknL865Sw5Z$  https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-ietf-6man-icmpv6-ioam-conf-state-10__;!!NpxR!j6oKYNANTA9WORuGLBq22srq3D5NQDh4ERJsioDhO0RuCR00J_4tAZRm-FwqH5LGTMGFtsecWrtj93ZzwanJieknL07ovgvJ$
> Looking forward to your review and comments.
>
> Cheers,
> Xiao Min
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> [e-mail]
> List Info: https://urldefense.com/v3/__https://mailman3.ietf.org/mailman3/lists/[e-mail]/__;!!NpxR!j6oKYNANTA9WORuGLBq22srq3D5NQDh4ERJsioDhO0RuCR00J_4tAZRm-FwqH5LGTMGFtsecWrtj93ZzwanJieknL6vA_2y6$
> --------------------------------------------------------------------

_______________________________________________
Int-area mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]