Version -09 (-07 and -08 as well as incremental changes) should address
IESG reviews from Roman, Paul and Martin (both DISCUSS and COMMENT).
Summary:
- clarify draft's focus is on layer 3
- enhance security section to address raised concerns (i.e., DISCUSS)
- clearly mention that the verification is not expected to be automatic,
therefore not creating a new DDoS attack vector
- and more to address comments
Thanks,
Éric & Justin
On 7/23/23 15:34, [email protected] wrote:
A New Internet-Draft is available from the on-line Internet-Drafts
directories. This Internet-Draft is a work item of the Operational Security
Capabilities for IP Network Infrastructure (OPSEC) WG of the IETF.
Title : Attribution of Internet Probes
Authors : Éric Vyncke
Benoît Donnet
Justin Iurman
Filename : draft-ietf-opsec-probe-attribution-09.txt
Pages : 12
Date : 2023-07-23
Abstract:
Active measurements over the public Internet can target either
collaborating parties or non-collaborating ones. Sometimes these
measurements, also called probes, are viewed as unwelcome or
aggressive.
This document suggests some simple techniques for a source to
identify its probes, allowing any party or organization to understand
what an unsolicited probe packet is, what its purpose is, and more
importantly who to contact. The technique relies on off-line
analysis of the probe, therefore it does not require any change in
the data or control plane. It has been designed mainly for layer-3
measurements.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsec-probe-attribution/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-opsec-probe-attribution-09.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-opsec-probe-attribution-09
Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec
_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec