On (03/29/17 14:50), Ron Bonica wrote:
> 
> Sowmini,
> 
> You have convinced me that there should be no information leaking at
> all. So, I think that the next version of the draft should enforce the
> following rules:
> 
> -  If the destination and probed interfaces are in the same VRF/routing
> instance/namespace, the ICMP Extended Echo Reply message will reflect
> the state of the probe interface
> - Otherwise, the ICMP Extended Echo message will contain an error code
> indicating that the probed interface does not exist.
> 
> Do you agree?

Yes, that's a much more consistent model (esp since the same IP 
address can itself exist in multiple VRFs) and also extends without loss
of generality to other virtualization models.

thanks for addressing this!

--Sowmini
 

_______________________________________________
Int-area mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/int-area

Reply via email to