[secdir] secdir review of draft-ietf-intarea-flow-label-balancing-01

"Waltermire, David A." <david.waltermire@nist.gov> Tue, 24 September 2013 01:02 UTC

Return-Path: <david.waltermire@nist.gov>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3D7B11E80FE; Mon, 23 Sep 2013 18:02:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.598
X-Spam-Level:
X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zSvD3sBv9XG4; Mon, 23 Sep 2013 18:02:18 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 411E811E80FA; Mon, 23 Sep 2013 18:02:16 -0700 (PDT)
Received: from WSXGHUB1.xchange.nist.gov (129.6.18.96) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.3.123.3; Mon, 23 Sep 2013 21:01:55 -0400
Received: from wsget2.nist.gov (129.6.13.151) by WSXGHUB1.xchange.nist.gov (129.6.18.96) with Microsoft SMTP Server (TLS) id 8.3.298.1; Mon, 23 Sep 2013 21:02:09 -0400
Received: from WSGHUB2.xchange.nist.gov (129.6.42.35) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.3.123.3; Mon, 23 Sep 2013 21:01:54 -0400
Received: from na01-bl2-obe.outbound.protection.outlook.com (207.46.163.207) by mail-g.nist.gov (129.6.42.33) with Microsoft SMTP Server (TLS) id 14.3.158.1; Mon, 23 Sep 2013 21:02:09 -0400
Received: from BLUPR09MB038.namprd09.prod.outlook.com (10.255.211.144) by BLUPR09MB037.namprd09.prod.outlook.com (10.255.211.139) with Microsoft SMTP Server (TLS) id 15.0.775.9; Tue, 24 Sep 2013 01:01:59 +0000
Received: from BLUPR09MB038.namprd09.prod.outlook.com ([169.254.9.84]) by BLUPR09MB038.namprd09.prod.outlook.com ([169.254.9.84]) with mapi id 15.00.0775.005; Tue, 24 Sep 2013 01:01:59 +0000
From: "Waltermire, David A." <david.waltermire@nist.gov>
To: "iesg@ietf.org" <iesg@ietf.org>, "secdir@ietf.org" <secdir@ietf.org>, "draft-ietf-intarea-flow-label-balancing-01.all@tools.ietf.org" <draft-ietf-intarea-flow-label-balancing-01.all@tools.ietf.org>
Thread-Topic: secdir review of draft-ietf-intarea-flow-label-balancing-01
Thread-Index: Ac64v+KAhPeWeWgeQa6vKt5AEf+R0w==
Date: Tue, 24 Sep 2013 01:01:58 +0000
Message-ID: <ba7f719ed2c24ec585ff4a4f1ab3611d@BLUPR09MB038.namprd09.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [129.6.224.152]
x-forefront-prvs: 09796A1B83
x-forefront-antispam-report: SFV:NSPM; SFS:(199002)(189002)(74316001)(79102001)(33646001)(56816003)(76576001)(4396001)(76796001)(77096001)(74706001)(56776001)(19300405004)(59766001)(46102001)(51856001)(83072001)(81686001)(69226001)(19580395003)(47976001)(31966008)(50986001)(47736001)(74366001)(77982001)(76786001)(81542001)(47446002)(83322001)(65816001)(63696002)(74502001)(80022001)(54356001)(74876001)(53806001)(16236675002)(49866001)(81342001)(15202345003)(66066001)(76482001)(80976001)(76176001)(54316002)(74662001)(15975445006)(81816001)(24736002); DIR:OUT; SFP:; SCL:1; SRVR:BLUPR09MB037; H:BLUPR09MB038.namprd09.prod.outlook.com; CLIP:129.6.224.152; FPR:; RD:InfoNoRecords; A:1; MX:1; LANG:en;
Content-Type: multipart/alternative; boundary="_000_ba7f719ed2c24ec585ff4a4f1ab3611dBLUPR09MB038namprd09pro_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
Subject: [secdir] secdir review of draft-ietf-intarea-flow-label-balancing-01
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Sep 2013 01:02:25 -0000

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.


This informational ID describes applying the IPv6 flow label to enhance layer 3/4 load distribution for large server farms. The security considerations in this document build upon the security considerations discussed in RFC6437.



The document is ready for publication.

I have no additional security concerns beyond those listed in the document.

Sincerely,
Dave Waltermire