IETF Logo Mail Archive

Re: [v6ops] Fwd: New Version Notification for draft-wkumari-long-headers-01.txt

Gert Doering <gert@space.net> Fri, 05 July 2013 13:17 UTC

Return-Path: <gert@space.net>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 890C311E82DF for <v6ops@ietfa.amsl.com>; Fri, 5 Jul 2013 06:17:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RzttAYwdxG3t for <v6ops@ietfa.amsl.com>; Fri, 5 Jul 2013 06:17:33 -0700 (PDT)
Received: from mobil.space.net (mobil.space.net [IPv6:2001:608:2:81::67]) by ietfa.amsl.com (Postfix) with ESMTP id EC78011E82DE for <v6ops@ietf.org>; Fri, 5 Jul 2013 06:17:32 -0700 (PDT)
Received: from mobil.space.net (localhost [127.0.0.1]) by mobil.space.net (Postfix) with ESMTP id 15DB160A0D for <v6ops@ietf.org>; Fri, 5 Jul 2013 15:17:29 +0200 (CEST)
X-SpaceNet-Relay: true
Received: from moebius3.space.net (moebius3.Space.Net [IPv6:2001:608:2:2::250]) by mobil.space.net (Postfix) with ESMTPS id EF92260A00 for <v6ops@ietf.org>; Fri, 5 Jul 2013 15:17:28 +0200 (CEST)
Received: (qmail 47949 invoked by uid 1007); 5 Jul 2013 15:17:28 +0200
Date: Fri, 05 Jul 2013 15:17:28 +0200
From: Gert Doering <gert@space.net>
To: Ray Hunter <v6ops@globis.net>
Message-ID: <20130705131728.GR2706@Space.Net>
References: <20130703235521.17726.15468.idtracker@ietfa.amsl.com> <0BDA30D8-AEDC-4E18-8ACE-64A032305F07@kumari.net> <1372897534.35448.YahooMailNeo@web2802.biz.mail.ne1.yahoo.com> <CAD6AjGSGeNHPUs9+F6OOAeDOy_FZpTOGkH6viX_fENca4H8X0g@mail.gmail.com> <1372899240.80312.YahooMailNeo@web2803.biz.mail.ne1.yahoo.com> <51D614F6.4030000@isi.edu> <20130705124651.GP2706@Space.Net> <51D6C601.70003@globis.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="wErsYZ8E6bdnXudW"
Content-Disposition: inline
In-Reply-To: <51D6C601.70003@globis.net>
X-NCC-RegID: de.space
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: IPv6 Ops WG <v6ops@ietf.org>
Subject: Re: [v6ops] Fwd: New Version Notification for draft-wkumari-long-headers-01.txt
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Jul 2013 13:17:33 -0000

Hi,

On Fri, Jul 05, 2013 at 03:11:29PM +0200, Ray Hunter wrote:
> If so, couldn't this requirement be implemented as "being able to filter
> at wire speed any traffic headed for the control processor based on a
> IPV6 source prefix", rather than having to filter on a full L4 header?

This is not actually sufficient.  To make real life operation work, you
need stuff like "permit <x> mbit/s of BGP traffic, <y> mbit/s of ICMP
traffic, and nothing else".

Being able to tell the box "oh, yeah, packets from that IXP are permitted!"
just to get CPU-starved by 10Gbit/s of garbage because another participant
there got hacked is not sufficient.  Trade-off-time again, of course - you 
might not be able to avoid losing BGP-to-the-IXP if you get flooded by 
TCP/179-packets from there, but everything else on that router should 
better not die.

Gert Doering
        -- Operator
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279

v2.23.0 | Report a Bug | By Email