Re: [v6ops] Fwd: New Version Notification for draft-wkumari-long-headers-01.txt

[Joe Touch <[e-mail]>]

On 7/5/2013 7:17 AM, Gert Doering wrote:
> Hi,
>
> On Fri, Jul 05, 2013 at 04:14:44PM +0200, Ray Hunter wrote:
>> Exactly. And the requirement from Geert and Steinar was for protecting
>> control plane traffic AFAICS.
>
> Well, actually we need both...
>
>> So what is the requirement to process L4 headers offorwarded traffic at
>> 10 gbps in backbone routers?
>
> ... "drop this UDP/53 flood at the most external borders we can to stop
> it from overloading internal links".

You don't need to know UDP/53 to do this; you need enough info to 
differentiate this flow from others. That means N bytes into the header; 
the more into the header you copy, the less false positives you drop 
(e.g., if you check only 40, you'd drop all traffic from a source).

That's value added for vendors that want to support looking further into 
a packet, but has nothing to do with whether the source should limit its 
header chain.

Joe