[153416] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: ipv6 book recommendations?

daemon@ATHENA.MIT.EDU (Mark Boolootian)
Tue Jun 5 18:37:49 2012

In-Reply-To: <CAP-guGXuoMAJ-crr7roi-Kk6EdMcHxcA43poaOJTxLefHmg+Gw@mail.gmail.com>
Date: Tue, 5 Jun 2012 15:37:12 -0700
From: Mark Boolootian <booloo@ucsc.edu>
To: William Herrin <bill@herrin.us>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Sure, but with the neighbor discovery cache issues that come up with
> /64's under attack, why open yourself to trouble where you can't
> realize any benefit?
>

I happen to be a fan of /126s, but if you chose to use a /64, presumably
your infrastructure ACLs would provide protection against such attacks.

home help back first fref pref prev next nref lref last post