Re: [RPSEC] BGP Security Requirements v08

[Joe Touch <[e-mail]>]

Curtis Villamizar wrote:
...
> GTSM is very effective in protecting against certain high volume
> attacks that would cripple infrastructure protected by cryptographic
> means alone.  From a practical standpoint GTSM used alone may be
> inadequate as a solution (though some ISPs might contest even that)
> but it is a required part of any solution in an ISP environment.
> 
> Curtis

I agree that DOS attacks benefit from protections that help reduce the
impact of attack traffic; GTSM falls into that category - it's clearly a
useful part of a DOS solution, but DOS protection isn't cryptographic
protection. The bulk of the BGP security requirements document focuses
on cryptographic issues - not DOS protection. It's worth noting the
difference, but not lumping the solutions together.

Joe

-- 
----------------------------------------
Joe Touch
Sr. Network Engineer, USAF TSAT Space Segment

_______________________________________________
RPSEC mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/rpsec