Re: [v6ops] IPv6 Extension Headers in the Real World

[Fernando Gont <[e-mail]>]

On 10/03/2014 03:53 PM, Joe Touch wrote:
> On 10/3/2014 7:17 AM, Fernando Gont wrote:
>> And you certainly do not want the "here's what we saw", "here's how we'd
>> like you to filter packets with EHs", "here's what the IETF should
>> consider when designing new protocols", because they tend to be rather
>> orthogonal, and also targeted at different communities.  -- the guy
>> doing the packet filtering is likely different from the guy developing
>> new protocols, etc.
> 
> The coupling of these determines how you act. It determines whether you
> can filter safely, only when under threat or in a particular
> environment, or should not filter under any circumstances.

Have you checked the eh-filtering I-D
(drfat-gont-opsec-ipv6-eh-filtering)? Because it has all that analysis
in the document itself



> And that's why it's dangerous to split these out. These should not be
> targeted at different communities without a single, coherent context of
> both what is known to happen, what the risks are, and the recommendations.

That's all in one I-D. OTOH, the I-D of the subject line is about
empirical observations.



> Ultimately, we need an Internet whose behavior is coherent, not based on
> potentially interfering communities perceived as being orthogonal.

You want have coherent Internet, because even when we can provide
advice, at the end of the day its each operator's business what they do
with their own network. -- in the same way that some networks break
PMTUD, while others don't.

Thanks,
-- 
Fernando Gont
e-mail: [e-mail] || [e-mail]
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1