[Sidrops] I-D Action: draft-ietf-sidrops-rpkimaxlen-12.txt

internet-drafts@ietf.org Fri, 29 July 2022 20:04 UTC

Return-Path: <internet-drafts@ietf.org>
X-Original-To: sidrops@ietf.org
Delivered-To: sidrops@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D2CB8C14F745; Fri, 29 Jul 2022 13:04:58 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Cc: sidrops@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 8.11.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: sidrops@ietf.org
Message-ID: <165912509884.43089.10116200609896589660@ietfa.amsl.com>
Date: Fri, 29 Jul 2022 13:04:58 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/8xJP7S0nBX3vu-5PCQIrOF3pzYU>
Subject: [Sidrops] I-D Action: draft-ietf-sidrops-rpkimaxlen-12.txt
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jul 2022 20:04:58 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the SIDR Operations WG of the IETF.

        Title           : The Use of maxLength in the RPKI
        Authors         : Yossi Gilad
                          Sharon Goldberg
                          Kotikalapudi Sriram
                          Job Snijders
                          Ben Maddison
  Filename        : draft-ietf-sidrops-rpkimaxlen-12.txt
  Pages           : 15
  Date            : 2022-07-29

Abstract:
   This document recommends ways to reduce the forged-origin hijack
   attack surface by prudently limiting the set of IP prefixes that are
   included in a Route Origin Authorization (ROA).  One recommendation
   is to avoid using the maxLength attribute in ROAs except in some
   specific cases.  The recommendations complement and extend those in
   RFC 7115.  The document also discusses the creation of ROAs for
   facilitating the use of Distributed Denial of Service (DDoS)
   mitigation services.  Considerations related to ROAs and origin
   validation in the context of destination-based Remotely Triggered
   Discard Route (RTDR) (elsewhere referred to as "Remotely Triggered
   Black Hole") filtering are also highlighted.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpkimaxlen/

There is also an htmlized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-sidrops-rpkimaxlen-12

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-sidrops-rpkimaxlen-12


Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts