Re: [v6ops] I-D Action: draft-gont-v6ops-ipv6-ehs-packet-drops-04.txt

["Xiejingrong (Jingrong)" <[e-mail]>]

Hi,
I read this draft and think it is a useful work.
I have two suggestions below:

1. Section 4 describes the challenge of "packet filtering mechanisms that require upper-layer information".
Some similar need for "packet filtering mechanisms that require EH information" has also been seen recently in IETF.
That may face the same challenge, and may need to be taken into consideration in this document.

2. Section 5.1.3 gives two examples to illustrate the requirement of "Deep ACL" on the "infrastructure address". 
Very good observation IMO, and I think some of the latest IETF practice may be useful for citing in this document.
RFC8754 section 5.1 separates a "programmable infrastructure address block" from the normal "infrastructure address", and thus makes a good solution to this "differentiation" requirements --
Deny the ICMP/BGP/etc traffic toward the "programmable infrastructure address block ", but no impact on existing rules to permit the ICMP/BGP/etc traffic toward to the normal "infrastructure address".

Thanks
Jingrong Xie


-----Original Message-----
From: v6ops [mailto:[e-mail]] On Behalf Of Brian E Carpenter
Sent: Monday, July 27, 2020 6:14 AM
To: IPv6 Operations <[e-mail]>
Subject: Re: [v6ops] I-D Action: draft-gont-v6ops-ipv6-ehs-packet-drops-04.txt

Hi,

IMHO this is useful work.

> A number of recent RFCs have discussed issues related to IPv6 
> extension headers,

I suggest to add RFC7045 to the bullet list, and delete the reference to it in the previous paragraph. In fact, the structure of the "Previous Work"
section is a bit strange, with a prose paragraph followed by a bullet list.
Maybe restructure that (e.g. transform it into a single longer bullet list)?

Regards
   Brian

On 26-Jul-20 17:28, [e-mail] wrote:
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> 
> 
>         Title           : Operational Implications of IPv6 Packets with Extension Headers
>         Authors         : Fernando Gont
>                           Nick Hilliard
>                           Gert Doering
>                           Warren Kumari
>                           Geoff Huston
> 	Filename        : draft-gont-v6ops-ipv6-ehs-packet-drops-04.txt
> 	Pages           : 15
> 	Date            : 2020-07-25
> 
> Abstract:
>    This document summarizes the security and operational implications of
>    IPv6 extension headers, and attempts to analyze reasons why packets
>    with IPv6 extension headers may be dropped in the public Internet.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-gont-v6ops-ipv6-ehs-packet-drop
> s/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-gont-v6ops-ipv6-ehs-packet-drops-04
> https://datatracker.ietf.org/doc/html/draft-gont-v6ops-ipv6-ehs-packet
> -drops-04
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-gont-v6ops-ipv6-ehs-packet-dro
> ps-04
> 
> 
> Please note that it may take a couple of minutes from the time of 
> submission until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> 
> _______________________________________________
> I-D-Announce mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/i-d-announce
> Internet-Draft directories: http://www.ietf.org/shadow.html or 
> ftp://ftp.ietf.org/ietf/1shadow-sites.txt
> 

_______________________________________________
v6ops mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/v6ops