Fernando,

>>> However, anything that says "if the chain is >X, then drop" is broken, 
>>> period. At some point, if you want to play "IPv6 router", you need to earn 
>>> the title.
>> 
>> an IPv6 router compliant with RFC2460 does not inspect the header chain.
>> 
>> I'm not aware of any router that drop packets with extension headers.
>> I'm aware of network operators applying filtering policy that results in 
>> packets with extension headers being dropped.
> 
> IIRC, someone reported that Cisco ASA drop v6 packets with extension
> headers by default.....

I think you'll find that the Cisco ASA isn't marketed as a router either, it is 
a firewall.

>> just to be clear I'm not against the IETF documenting e.g. in a BCP, what 
>> the longest expected header chain should be.
> 
> Well, that seems more std track than bcp to me.

I don't think we should encode in standard a number that is based on the 
ability of current hardware.
nor do I think we have any standard documents describing the behaviour of 
filtering routers / firewalls / middleboxes in this respect.

cheers,
Ole
--------------------------------------------------------------------
IETF IPv6 working group mailing list
[email protected]
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to