Re: [v6ops] draft-gont-v6ops-ipv6-ehs-in-real-world: clarification text

[Gert Doering <[e-mail]>]

Hi,

(re-formatted weird Mark ZZZ quoting style to gain proper attribution)

On Wed, Apr 22, 2015 at 10:55:26AM +0000, Mark ZZZ Smith wrote:
> > No :-) - Hardware *is* sophisticated today, but only up to a certain limit.
> > 
> > What I think would be implementable with reasonable tradeoffs between
> > "unsane hardware effort that my end customers are not going to pay" and
> > "still flexible" is to require that the final EH is contained in the 
> > first <n> bytes (say, 512) and that the final header must be in the 
> > first fragment.
> 
> / So would you expect all of your routers to be able to do this
> level of processing? It seems to me that you'd only need routers
> that can do that processing facing potential malicious sources e.g.
> transit, peering, and possibly customer (although customers have a
> strong disincentive because it is in their interests for the router
> to stay available). I wouldn't think it would be worth the expense
> to have this level of hardware filtering available on core routers.

Unless you define a "core router" to be a pure MPLS P node, which does not 
do *any* IP processing, yes, it will have to do the same thing.

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: [phone]           USt-IdNr.: DE813185279