[105480] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: IPv4 source routing options and IPv6 Type 0 Routing Header

daemon@ATHENA.MIT.EDU (Joe Abley)
Wed Jun 25 08:06:42 2008

From: Joe Abley <jabley@ca.afilias.info>
To: Fernando Gont <fernando@gont.com.ar>
In-Reply-To: <200806250758.m5P7wen1027990@venus.xmundo.net>
Date: Wed, 25 Jun 2008 08:06:25 -0400
Cc: nanog@merit.edu
Errors-To: nanog-bounces@nanog.org


On 25 Jun 2008, at 03:55, Fernando Gont wrote:

> Quite a few times it has been mentioned to me that some peering  
> agreements require support for the IPv4 source routing options. I  
> was wondering whether this is still the case for some ISPs, or it is  
> not the case anymore.
>
> I was also wondering if it has ever been the case that IPv6 peering  
> agreements have required support for Type 0 Routing Header and, if  
> it has, whether that still happens nowadays. (I guess not, but....)

I have never seen such a requirement for IPv6.

Note also that type-0 routing headers were deprecated in RFC 5095,  
last year.

> The functionality provided by IPv6's Type 0 Routing Header can be  
> exploited in order to achieve traffic amplification over a remote  
> path for the purposes of generating denial-of-service traffic. This  
> document updates the IPv6 specification to deprecate the use of IPv6  
> Type 0 Routing Headers, in light of this security concern.


Joe


home help back first fref pref prev next nref lref last post