Re: [v6ops] [homenet] Tsinghua work on source/destination routing
Jen Linkova <furry13@gmail.com> Thu, 07 November 2013 23:27 UTC
Return-Path: <furry13@gmail.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5FB311E8103; Thu, 7 Nov 2013 15:27:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.247
X-Spam-Level:
X-Spam-Status: No, score=-2.247 tagged_above=-999 required=5 tests=[AWL=-0.247, BAYES_00=-2.599, J_CHICKENPOX_13=0.6, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B-AXll9Qp05c; Thu, 7 Nov 2013 15:27:27 -0800 (PST)
Received: from mail-qc0-x236.google.com (mail-qc0-x236.google.com [IPv6:2607:f8b0:400d:c01::236]) by ietfa.amsl.com (Postfix) with ESMTP id E2DF111E8278; Thu, 7 Nov 2013 15:27:24 -0800 (PST)
Received: by mail-qc0-f182.google.com with SMTP id n7so1108757qcx.13 for <multiple recipients>; Thu, 07 Nov 2013 15:27:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=VQxqJWkh/3nQG4mmBLkm0StRghWMOeanJOFthn2unaI=; b=ObA7wKbqjnGrhn4fGDghxlX3wIDtEKJnddxAd0YQhbNUiUDMwGp30dW59QMy/GnDot WCTCYdliIjV80a4AC3UwI1qvWbm+gGBnx/cSQe3ev0bwFloNRuDiJyiMkFsskKNW2NBh 5BKDDnFJD7freyf/c3LC895SmXqTChuR4Uc4EBkDLxLddGWHdJSAAdwDyFrlWIfFAa7l 9Q8mg0BoZTQWzwvs4Z21XLl7qLRCfid9dO6iVG3pNJtUU5gNo7MEJHHrOuPJ1Nb+doiN KUnCzcwUenmitVaidupvB3XBkhLZlOBSodZxcoXUsXUu38q4jsuhYXoSuLbBzSwPEXro bUXQ==
X-Received: by 10.224.73.200 with SMTP id r8mr18903610qaj.72.1383866844074; Thu, 07 Nov 2013 15:27:24 -0800 (PST)
MIME-Version: 1.0
Received: by 10.224.100.195 with HTTP; Thu, 7 Nov 2013 15:27:04 -0800 (PST)
In-Reply-To: <CAJgsEzVmg5hGwsgVFDKrzbmrBnKBOZ1oAXRp-K0ovtPhwENcNw@mail.gmail.com>
References: <F7C18630-1964-4AFD-8549-559D7582B114@cisco.com> <CAFU7BAQT=+B==8pvOYSsWnCvcMEVzy2nh8dAZZXHzYjwmedRpg@mail.gmail.com> <CAJgsEzVmg5hGwsgVFDKrzbmrBnKBOZ1oAXRp-K0ovtPhwENcNw@mail.gmail.com>
From: Jen Linkova <furry13@gmail.com>
Date: Fri, 08 Nov 2013 00:27:04 +0100
Message-ID: <CAFU7BAT0GWeaJq8h_03PjJRtHupSWSFVLVXJ-FRjpti-7W+aWg@mail.gmail.com>
To: Hermin Anggawijaya <hermin.anggawijaya@gmail.com>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: "v6ops@ietf.org WG" <v6ops@ietf.org>, Routing WG <rtgwg@ietf.org>
Subject: Re: [v6ops] [homenet] Tsinghua work on source/destination routing
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/v6ops>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2013 23:27:32 -0000
On Thu, Nov 7, 2013 at 7:40 PM, Hermin Anggawijaya <hermin.anggawijaya@gmail.com> wrote: >> I'm seeing plenty of packets from link-local sources to global >> destinations >> ..... > >> 2) routers on the Internet do forward such packets (violating the rule >> mentioned above). >> Fixing #2 actually requires making forwarding decision based on src >> and dst (which is not happening now). > > To fix the above issue, wouldn't address scope checking be enough, rather > than the [src,dst] based routing > discussed ? My point is that to do verify the scope, the router need to check *source* address while making forwarding decision. It looks like it is not happening now but it might get changed by [src, dst] based routing. > On Thu, Nov 7, 2013 at 8:58 AM, Jen Linkova <furry13@gmail.com> wrote: >> >> On Thu, Nov 7, 2013 at 5:45 PM, Fred Baker (fred) <fred@cisco.com> wrote: >> > Examples of use cases are generally around multi-prefix campus networks. >> > There is a security use case that could be of value; at IETF 87, George >> > Michaelson of APNIC reported on ULAs seen in his darknet. The short report >> > is that he sees a fair bit of traffic with a ULA source address on the >> > backbone. An interesting potential use of source/destination routing would >> > counter that, and perhaps mitigate the need for ISP BCP 38 if generally >> > deployed; in a case where a network is using a ULA and a global prefix >> > (e.g., is not multihomed but has two prefixes, one of which is intended to >> > only be used within its network), the default route to the network egress >> > would use the global prefix as a source, and as a result traffic sent >> > outside the network with a ULA source prefix would in effect have no route. >> > The network could literally only emit traffic from its correct prefix. >> >> Looks like we (finally) have a chance to enforce the requirement from >> RFC4007, Section9: >> >> "If transmitting the packet on the chosen next-hop interface >> would cause the packet to leave the zone of the source >> address, i.e., >> cross a zone boundary of the scope of the >> source address, then the packet is discarded. " >> >> I'm seeing plenty of packets from link-local sources to global >> destinations which means that: >> 1) there are hosts with broken default address selection >> AND >> 2) routers on the Internet do forward such packets (violating the rule >> mentioned above). >> Fixing #2 actually requires making forwarding decision based on src >> and dst (which is not happening now). >> >> More data (sorry, shameless plug :)) >> https://ripe67.ripe.net/presentations/288-Jen_RIPE67.pdf >> >> -- >> SY, Jen Linkova aka Furry >> _______________________________________________ >> v6ops mailing list >> v6ops@ietf.org >> https://www.ietf.org/mailman/listinfo/v6ops > > -- SY, Jen Linkova aka Furry
- [v6ops] Tsinghua work on source/destination routi… Fred Baker (fred)
- Re: [v6ops] [homenet] Tsinghua work on source/des… Jen Linkova
- Re: [v6ops] Tsinghua work on source/destination r… Templin, Fred L
- Re: [v6ops] [homenet] Tsinghua work on source/des… Hermin Anggawijaya
- Re: [v6ops] [homenet] Tsinghua work on source/des… 神明達哉
- Re: [v6ops] [homenet] Tsinghua work on source/des… Fred Baker (fred)
- Re: [v6ops] [homenet] Tsinghua work on source/des… Brian E Carpenter
- Re: [v6ops] [homenet] Tsinghua work on source/des… Jen Linkova
- Re: [v6ops] [homenet] Tsinghua work on source/des… Jen Linkova
- Re: [v6ops] [homenet] Tsinghua work on source/des… Tim Chown
- Re: [v6ops] [homenet] Tsinghua work on source/des… Jen Linkova
- Re: [v6ops] [homenet] Tsinghua work on source/des… Hermin Anggawijaya
- Re: [v6ops] [homenet] Tsinghua work on source/des… 神明達哉
- Re: [v6ops] [homenet] Tsinghua work on source/des… Owen DeLong
- Re: [v6ops] [homenet] Tsinghua work on source/des… Owen DeLong
- Re: [v6ops] [homenet] Tsinghua work on source/des… 神明達哉
- Re: [v6ops] [homenet] Tsinghua work on source/des… Juliusz Chroboczek
- Re: [v6ops] [homenet] Tsinghua work on source/des… Juliusz Chroboczek
- Re: [v6ops] [homenet] Tsinghua work on source/des… Shu Yang
- Re: [v6ops] [homenet] Tsinghua work on source/des… Henning Rogge
- Re: [v6ops] [homenet] Tsinghua work on source/des… Hermin Anggawijaya
- Re: [v6ops] [homenet] Tsinghua work on source/des… Shu Yang
- Re: [v6ops] [homenet] Tsinghua work on source/des… Shu Yang
- Re: [v6ops] [homenet] Tsinghua work on source/des… Juliusz Chroboczek
- Re: [v6ops] [homenet] Tsinghua work on source/des… Markus Stenberg