Updated I-D: draft-melegassi-mvps-ddos-resilience-01

Leonardo Melegassi <melegassi@catellix.com> Mon, 06 July 2026 20:07 UTC

Return-Path: <melegassi@catellix.com>
X-Original-To: rtg-bfd@mail2.ietf.org
Delivered-To: rtg-bfd@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 2BDAC110EF882; Mon, 6 Jul 2026 13:07:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783368472; bh=2r8cgEt+3I9tLOUZFPLJ8BoNCJfiJbVlKUD5YycoKGk=; h=Date:From:To:In-Reply-To:Subject; b=Id85J/v9U7JymGSu8Wl4clPv4XCGLsLiQ8/ewAU/LFnNvx/ASWPvkSr+HeTw/DXlk Wtli+OwU7xKBpM2m1Dx33prE/sSC1zvo8dR2spP26ENO4rI54x1mfOLhV7WTfeHmXF QNrlAK3z7N25W9PimKmsev4TAso+WqyseKvz3ND0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.884
X-Spam-Level:
X-Spam-Status: No, score=-1.884 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0rLFTVnMFVD2; Mon, 6 Jul 2026 13:07:50 -0700 (PDT)
Received: from sender4-op-o15.zoho.com (sender4-op-o15.zoho.com [136.143.188.15]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 5021D110E5D46; Mon, 6 Jul 2026 12:52:31 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1783367550; cv=none; d=zohomail.com; s=zohoarc; b=cQWyJFGPF2QCvTZjT0FtIWRi+yJCJEL1yhMKOJylYJ0fk2WAM0Pt4Uw1QaCTX41oklrdvpgLoG0tVb3se2iJRIkt8TBxm4WrPNJCeOeULiL2tXPWQ7+daVuvkoxxYlI9ANUvKWo0CoOCfrYq9ONPTZ2FCYzbWwF+29iV1wuvrYE=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1783367550; h=Content-Type:Date:Date:From:From:MIME-Version:Message-ID:Subject:Subject:To:To:Message-Id:Reply-To:Cc; bh=2r8cgEt+3I9tLOUZFPLJ8BoNCJfiJbVlKUD5YycoKGk=; b=PhbjnnOLR5mtyQFm5xXggzVQEhv48Fj+n5NvrkFXZ4qMtHUpf/oRP3agoPERpeb1YKd25N2hQfZ6VdDIj+2+im2hpLVRJYiAIbvsG4usAm5fcaHKtOhf7g6t41O1jAm27ICCTM9zygKiDb5nwX129MPkFwUcipWgrM1jB1GpJm0=
ARC-Authentication-Results: i=1; mx.zohomail.com; spf=pass smtp.mailfrom=melegassi@catellix.com; dmarc=pass header.from=<melegassi@catellix.com>
Received: from mail.zoho.com by mx.zohomail.com with SMTP id 1783367549743886.9538606806333; Mon, 6 Jul 2026 12:52:29 -0700 (PDT)
Received: from mail.zoho.com by mx.zohomail.com with SMTP id 1783367547337301.75006106589046; Mon, 6 Jul 2026 12:52:27 -0700 (PDT)
Date: Mon, 06 Jul 2026 16:52:27 -0300
From: Leonardo Melegassi <melegassi@catellix.com>
To: rtg-bfd <rtg-bfd@ietf.org>, opsawg <opsawg@ietf.org>
Message-Id: <19f38fd3982.6a63007610447481.6860339719640329086@catellix.com>
In-Reply-To:
Subject: Updated I-D: draft-melegassi-mvps-ddos-resilience-01
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_35926951_1799708409.1783367547266"
Importance: Medium
User-Agent: Zoho Mail
X-Mailer: Zoho Mail
Message-ID-Hash: 3RQ7ELEJIOK3IYN57PPRF7WL5GP43ALR
X-Message-ID-Hash: 3RQ7ELEJIOK3IYN57PPRF7WL5GP43ALR
X-MailFrom: melegassi@catellix.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rtg-bfd.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
List-Id: "RTG Area: Bidirectional Forwarding Detection" <rtg-bfd.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rtg-bfd/CO-dLyWkjb_IiOXIW5UF9V6-rEU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtg-bfd>
List-Help: <mailto:rtg-bfd-request@ietf.org?subject=help>
List-Owner: <mailto:rtg-bfd-owner@ietf.org>
List-Post: <mailto:rtg-bfd@ietf.org>
List-Subscribe: <mailto:rtg-bfd-join@ietf.org>
List-Unsubscribe: <mailto:rtg-bfd-leave@ietf.org>

Dear BFD WG and OPSAWG,



I have submitted revision -01 of

draft-melegassi-mvps-ddos-resilience.



  https://datatracker.ietf.org/doc/draft-melegassi-mvps-ddos-resilience/ 



Main changes: added formal proofs for the three theorems

(D1-D3), and a real-data validation section using two months

of RIPE Atlas and RIPE Stat BGP measurements.



The BGP data (30 days, 5 anycast DNS prefixes) produced

9 alarm-days, all of which correlate with independently

documented public Internet events -- including the .de

DNSSEC outage (May 5), the Seacom/EASSy submarine cable

breaks (May 12), and the Railway/GCP platform suspension

(May 19-20).  Details in Section 7.2 of the draft.



The intended status remains Experimental.  Feedback welcome.



Best regards,

Leonardo Melegassi

Catellix