Re: [RPSEC] DDoS of routing ?

On Thu, 13 Mar 2003, Ayyasamy, Senthilkumar  (UMKC-Student) wrote:

> while a DoS attack of routing pkts by a peer can lead to RT
> exhaustion, is DDoS of routing pkts observed previously?

I think attacks on port 179 of routers have been observed in the wild.

> Actually, i had an offline discussion with sandy long back and she
> mentioned that it doesn't exist.

You're not saying we should wait to fix holes until someone falls in
them, are you?

At the same time, IGPs are somewhat hard to attack as they use
multicasts that routers aren't going to forward.

> context: zinin-rtg-dos-00
> I guess, zinin draft talks only about DDoS of data traffic.

Doesn't look that way to me. One point we should all take to heart:

  "It is interesting to observe that as security
   mechanisms in routing protocols become more sophisticated and
   computationally expensive, it becomes easier for an attacker to mount
   a CPU-exhaustion-based attack against a router."

_______________________________________________
RPSEC mailing list
RPSEC@ietf.org
https://www1.ietf.org/mailman/listinfo/rpsec