Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-20 Thread Bill Jouris
: "v6...@ietf.org WG" ; IETF IPv6 Mailing List Sent: Friday, June 14, 2013 3:15 PM Subject: Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain) On Fri, Jun 14, 2013 at 2:19 PM, Tony Hain wrote: Focus on the real operational requirement

Re: [6MAN] Re: [6MAN] Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread Warren Kumari
On Jun 14, 2013, at 6:31 PM, Doug Barton wrote: > On 06/14/2013 03:00 PM, Warren Kumari wrote: >> I've already mentioned this in one of the N (where is is becoming >> distressingly large) threads on this > > Yeah, you would be one of those "more knowledgeable" folks I was referring > to. :)

Re: [6MAN] Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread Doug Barton
On 06/14/2013 03:00 PM, Warren Kumari wrote: I've already mentioned this in one of the N (where is is becoming distressingly large) threads on this Yeah, you would be one of those "more knowledgeable" folks I was referring to. :) --

Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread Lorenzo Colitti
On Fri, Jun 14, 2013 at 2:19 PM, Tony Hain wrote: > Focus on the real operational requirement (firewall functionality), then > make sure that the constraint automatically tracks evolution in firewall > functionality. Getting there leads to L4 in the first fragment, and > anything > else leads to

Re: [6MAN] Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread Warren Kumari
On Jun 14, 2013, at 2:56 PM, Doug Barton wrote: > On 06/14/2013 01:39 AM, t.petch wrote: >> - Original Message - >> From: "Doug Barton" >> To: >> Sent: Thursday, June 13, 2013 9:23 PM >>> On 06/13/2013 01:17 AM, Randy Bush wrote: > FWIW, I don't think anyone has proposed "if the ch

Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread Doug Barton
On 06/14/2013 02:19 PM, Tony Hain wrote: While guidance is useful to establish a consistent-behavior baseline across vendors and deployments, care must be taken to avoid the trap of precluding innovation and evolution. Well-meaning limits based on current hardware capabilities will become doctrin

RE: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread Tony Hain
Doug Barton wrote: > >>... > >> I agree with Randy, providing guidance on this topic will be very > >> helpful, and BCP is the right category. > >> > >> As for what the number should be, if 256 is in the 80th percentile or > >> higher of Warren's survey, that should be fine. A few vendors who are >

Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread Doug Barton
On 06/14/2013 01:39 AM, t.petch wrote: - Original Message - From: "Doug Barton" To: Sent: Thursday, June 13, 2013 9:23 PM On 06/13/2013 01:17 AM, Randy Bush wrote: FWIW, I don't think anyone has proposed "if the chain is larger than X, then drop". i am saying that i am telling my

Re: [v6ops] Limiting the size of the IPv6 headerchain (draft-ietf-6man-oversized-header-chain)

2013-06-14 Thread t . petch
- Original Message - From: "Doug Barton" To: Sent: Thursday, June 13, 2013 9:23 PM > On 06/13/2013 01:17 AM, Randy Bush wrote: > >> FWIW, I don't think anyone has proposed "if the chain is larger than X, > >> then drop". > > > > i am saying that i am telling my neighbor that, if the heade