On 08/07/2014 08:05 AM, Ole Troan wrote: > >>> how do people handle packets with HBH present? Since their use is >>> a potential attack vector, do people rate-limit them? I can't >>> seem to find some sort of "best practice" on the issue >> >> This is the current state of affairs on the public IPv6 Internet: >> <http://www.iepg.org/2014-07-20-ietf90/iepg-ietf90-ipv6-ehs-in-the-real-world-v2.0.pdf> > >> > s/public IPv6 Internet/selected content providers/
Well... with did our measurements over Alexa's top-1m sites... that's a bit more than "selected content providers".... > advice with regards to HBH headers. assuming there isn't any feature > enabled that uses HBH. on a platform that supports forwarding of > packets with HBH without punting, forward. for platforms that do punt > regardless, drop. Agreed. Cheers, -- Fernando Gont e-mail: [email protected] || [email protected] PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1
