Re: [v6ops] draft-ietf-v6ops-balanced-ipv6-security WGLC

[Tarko Tikan <[e-mail]>]

hey,

> We are looking specifically for comments on the importance of the
> document as well as its content. If you have read the document and
> believe it to be of operational utility, that is also an important
> comment to make.

+1 from me (as an operator) for the concept. This is similar to what I 
plan to deploy but with one exception - we will not do this in the CPE, 
we will do it in the edge routers via subscriber management instead.

This way we can configure it centrally and very easily push new policy 
for certain subscriber when one wants to have "permit any" inbound. For 
us this also follows IPv4 operating model (which might not always be the 
best case but feels like a best case for us).

I'm _not_ saying doing this in the CPE is wrong, this is very typical 
for the cable operators for example - configure everything via modem 
config files delivered on boot. Or for operators who have no subscriber 
awareness in the edge routers. YMMV.

-- 
tarko,
elion.ee