[GTER] [lacnog] [LAC-TF] Fwd: RFC 9288 on Recommendations on the Filtering of IPv6 Packets Containing IPv6 Extension Headers at Transit Routers

Fernando Gont fgont at si6networks.com
Wed Aug 24 21:04:24 -03 2022


Te refieres a si el filtrado va a repercutir, o si es que el documento 
va a repercutir en las politicas aplicadas?



On 22/8/22 10:34, Douglas Fischer wrote:
> Inevitável pensar se isso irá refletir positiva ou negativamente no LDP 
> over IPv6 passando sobre "Internet"(roteadores de trânsito DFZ).
> 
> Em qui., 18 de ago. de 2022 às 23:47, Fernando Gont 
> <fgont at si6networks.com <mailto:fgont at si6networks.com>> escreveu:
> 
>     Estimad at s,
> 
>     Se acaba de publicar el RFC 9288, sobre "Recommendations on the
>     Filtering of IPv6 Packets Containing IPv6 Extension Headers at Transit
>     Routers" que escribi junto a Will Liu.
> 
>     El mismo se encuentra disponible en:
>     https://www.rfc-editor.org/rfc/rfc9288
>     <https://www.rfc-editor.org/rfc/rfc9288>
> 
>     En lo que hace al RFC, creo cre su principal valor esta en analiar que
>     cosas dependen de los Extension Headers (EHs), y que cosas podrian
>     lelgar a romperse si se descartan paquetes con determinados EHs.
> 
>     Es topico es mas que interesante. Ya en su momento publicamos RFC 7872
>     (https://www.rfc-editor.org/rfc/rfc7872
>     <https://www.rfc-editor.org/rfc/rfc7872>) analizando como se dropean
>     los
>     paquetes con IPv6 EHs en la Internet publica, asi como tambien
>     publicamos RFC 9098 (https://www.rfc-editor.org/rfc/rfc9098.html
>     <https://www.rfc-editor.org/rfc/rfc9098.html>),
>     analizando los motivos que hay para droppearlos.
> 
>     Mas recientemente se ha vuelto a despertar el interes en medir hasta
>     que
>     punto se droppean -- supongo que motivados por la esperana/deseo de
>     algunos que la realidad sea diferente.
> 
> 
>     Trabaje en este RFC (RFC9288) unos 7 años. -- mucho tiempo! Tiene un
>     valor particular para mi, porque inclusive luego de haber trabajado
>     tanto tiempo, estuve a punto de perderlo, por no tener tiempo de
>     trabajar con el.
> 
>     Al final, los planetas se alinearon :-), y pude salvarlo justito antes
>     de que se perdiera..
> 
>     El trabajo de Ingenieria de Internet que se hace de la region se
>     hace en
>     muy buena medida a puro pulmon... Ya que no ha cambiado mucho la
>     situacion en lo que respecta a la participacion desde la region.
> 
>     Por tal motivo, mi agracedimiento a Guillote y Nelivien (socios
>     fundamentales), y a Diego Maradona, a quien evidentemente este
>     documento
>     va dedicado.
> 
>     Estos tipos entendieron todo:
> 
>     * https://www.youtube.com/watch?v=6e9WLX2aKbE
>     <https://www.youtube.com/watch?v=6e9WLX2aKbE>
>     * https://www.youtube.com/watch?v=JwqAG4XWLpQ
>     <https://www.youtube.com/watch?v=JwqAG4XWLpQ>
> 
> 
>     P.S.: https://youtu.be/9Y9Iq9hoRdM?t=89
>     <https://youtu.be/9Y9Iq9hoRdM?t=89>
> 
> 
>     Saludos cordiales,
>     --
>     Fernando Gont
>     SI6 Networks
>     Segurola y Habana 4310 7mo piso
>     Ciudad Autonoma de Buenos Aires
>     Argentina
>     Email: fgont at si6networks.com <mailto:fgont at si6networks.com>
>     URI: https://www.si6networks.com <https://www.si6networks.com>
> 
> 
> 
> 
>     -------- Forwarded Message --------
>     Subject: RFC 9288 on Recommendations on the Filtering of IPv6 Packets
>     Containing IPv6 Extension Headers at Transit Routers
>     Date: Thu, 18 Aug 2022 16:21:47 -0700 (PDT)
>     From: rfc-editor at rfc-editor.org <mailto:rfc-editor at rfc-editor.org>
>     To: ietf-announce at ietf.org <mailto:ietf-announce at ietf.org>,
>     rfc-dist at rfc-editor.org <mailto:rfc-dist at rfc-editor.org>
>     CC: rfc-editor at rfc-editor.org <mailto:rfc-editor at rfc-editor.org>,
>     drafts-update-ref at iana.org <mailto:drafts-update-ref at iana.org>,
>     opsec at ietf.org <mailto:opsec at ietf.org>
> 
>     A new Request for Comments is now available in online RFC libraries.
> 
>                       RFC 9288
> 
>               Title:      Recommendations on the Filtering of
>            IPv6 Packets Containing IPv6 Extension Headers
>        at Transit Routers         Author:     F. Gont,
>                           W. Liu
>               Status:     Informational
>               Stream:     IETF
>               Date:       August 2022
>               Mailbox: fgont at si6networks.com <mailto:fgont at si6networks.com>,
>     liushucheng at huawei.com <mailto:liushucheng at huawei.com>
>               Pages:      33
>               Updates/Obsoletes/SeeAlso:   None
> 
>               I-D Tag:    draft-ietf-opsec-ipv6-eh-filtering-10.txt
> 
>               URL: https://www.rfc-editor.org/info/rfc9288
>     <https://www.rfc-editor.org/info/rfc9288>
> 
>               DOI:        10.17487/RFC9288
> 
>     This document analyzes the security implications of IPv6 Extension
>     Headers and associated IPv6 options. Additionally, it discusses the
>     operational and interoperability implications of discarding packets
>     based on the IPv6 Extension Headers and IPv6 options they contain.
>     Finally, it provides advice on the filtering of such IPv6 packets at
>     transit routers for traffic not directed to them, for those cases
>     where such filtering is deemed as necessary.
> 
>     This document is a product of the Operational Security Capabilities for
>     IP Network Infrastructure Working Group of the IETF.
> 
> 
>     INFORMATIONAL: This memo provides information for the Internet
>     community.
>     It does not specify an Internet standard of any kind. Distribution of
>     this memo is unlimited.
> 
>     This announcement is sent to the IETF-Announce and rfc-dist lists.
>     To subscribe or unsubscribe, see
>     https://www.ietf.org/mailman/listinfo/ietf-announce
>     <https://www.ietf.org/mailman/listinfo/ietf-announce>
>     https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist
>     <https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist>
> 
>     For searching the RFC series, see https://www.rfc-editor.org/search
>     <https://www.rfc-editor.org/search>
>     For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk
>     <https://www.rfc-editor.org/retrieve/bulk>
> 
>     Requests for special distribution should be addressed to either the
>     author of the RFC in question, or to rfc-editor at rfc-editor.org
>     <mailto:rfc-editor at rfc-editor.org>.  Unless
>     specifically noted otherwise on the RFC itself, all RFCs are for
>     unlimited distribution.
> 
> 
>     The RFC Editor Team
>     Association Management Solutions, LLC
> 
>     _______________________________________________
>     IETF-Announce mailing list
>     IETF-Announce at ietf.org <mailto:IETF-Announce at ietf.org>
>     https://www.ietf.org/mailman/listinfo/ietf-announce
>     <https://www.ietf.org/mailman/listinfo/ietf-announce>
>     _______________________________________________
>     LACTF mailing list
>     LACTF at lacnic.net <mailto:LACTF at lacnic.net>
>     https://mail.lacnic.net/mailman/listinfo/lactf
>     <https://mail.lacnic.net/mailman/listinfo/lactf>
>     Cancelar suscripcion: lactf-unsubscribe at lacnic.net
>     <mailto:lactf-unsubscribe at lacnic.net>
> 
> 
> 
> -- 
> Douglas Fernando Fischer
> Engº de Controle e Automação
> 
> _______________________________________________
> LACNOG mailing list
> LACNOG at lacnic.net
> https://mail.lacnic.net/mailman/listinfo/lacnog
> Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog

-- 
Fernando Gont
e-mail: fgont at si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492


More information about the gter mailing list