[137155] in North American Network Operators' Group
Re: IPv6 addressing for core network
daemon@ATHENA.MIT.EDU (Owen DeLong)
Wed Feb 9 17:11:37 2011
From: Owen DeLong <owen@delong.com>
In-Reply-To: <iiuj0f$tes$1@dough.gmane.org>
Date: Wed, 9 Feb 2011 14:06:40 -0800
To: David Freedman <david.freedman@uk.clara.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Feb 9, 2011, at 9:30 AM, David Freedman wrote:
> I think the solution to all of these problems is really to use public
> addressing but filter access to it at your edge (yes, even ICMP TOOBIG
> can be filtered safely if you have designed things in a sane way)
>
Filtering ICMP TOOBIG is actually bad. No matter how sane your
design is, you can't count on someone further down the road not
having a smaller MTU (unless you're running a 1280 MTU).
Owen
