Internet-Draft draft-ietf-bess-evpn-first-hop-security-01.txt is now
available. It is a work item of the BGP Enabled ServiceS (BESS) WG of the
IETF.
Title: EVPN First Hop Security
Authors: Ali Sajassi
Lukas Krattiger
Krishnaswamy Ananthamurthy
Jorge Rabadan
Wen Lin
Name: draft-ietf-bess-evpn-first-hop-security-01.txt
Pages: 23
Dates: 2026-07-22
Abstract:
The Dynamic Host Configuration Protocol (DHCP) snoop database stores
valid IPv4-to-MAC and IPv6-to-MAC bindings by snooping on DHCP
messages. These bindings are used by security functions like Dynamic
Address Resolution Protocol Inspection (DAI), Neighbor Discovery
Inspection (NDI), IPv4 Source Guard, and IPv6 Source Guard to
safeguard against traffic received with a spoofed address. These
functions are collectively referred to as First Hop Security (FHS).
This document proposes BGP extensions and new Ethernet VPN (EVPN)
procedures to distribute and synchronize the DHCP snoop database to
support FHS. Such synchronization is needed to support EVPN host
mobility and multihoming.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-bess-evpn-first-hop-security/
There is also an HTMLized version available at:
https://datatracker.ietf.org/doc/html/draft-ietf-bess-evpn-first-hop-security-01
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-bess-evpn-first-hop-security-01
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
BESS mailing list -- [email protected]
To unsubscribe send an email to [email protected]
