I think this is an interesting approach and encourage the w.g. to read it and comment on the list.
Bob On Oct 21, 2011, at 2:44 PM, Joel M. Halpern wrote: > I would like to call people's attention to the draft below. > I would like to hear from folks as to what they think of this complement to > some of the existing work on the ND based denial of service attack. > I do not intend to present this at the WG meeting, as I would like a chance > to hear from folks first. > > Yours, > Joel > > -------- Original Message -------- > Subject: I-D Action: draft-halpern-6man-nddos-mitigation-00.txt > Date: Mon, 17 Oct 2011 14:17:09 -0700 > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > > Title : Mitigating Neighbor Discovery Based Denial of Service > Attacks > Author(s) : Joel M. Halpern > Filename : draft-halpern-6man-nddos-mitigation-00.txt > Pages : 6 > Date : 2011-10-17 > > It has been observed that with the large space of IPv6 addresses > within a subnet, remote attackers can send packets that saturate a > rotuers ND cache, and potentially saturate a subnet with ND > Soliciation messages as well. Some operational techniques and small > protocol adjustments have been proposed that can help alleviate this > problem. This draft proposes a slightly more drastic optional > behavior for routers, which can nearly eliminate this problem. > > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-halpern-6man-nddos-mitigation-00.txt > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > This Internet-Draft can be retrieved at: > ftp://ftp.ietf.org/internet-drafts/draft-halpern-6man-nddos-mitigation-00.txt > _______________________________________________ > > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
