Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

2023-05-26 Thread Fernando Gont
Hi, Eduard, On 25/5/23 07:21, Vasilenko Eduard wrote: IMHO: Fernando comes here with a good example (EH DoS). Security is a good reason to block EHs. But for business, every feature should be tested, supported, and somebody should pay an additional performance penalty. I am not sure which

Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

2023-05-25 Thread Arnaud Taddei
;> > Cc: Manfredi (US), Albert E <mailto:albert.e.manfr...@boeing.com>>; IPv6 Operations <mailto:v6...@ietf.org>>; 6man mailto:i...@ietf.org>>; > opsec@ietf.org <mailto:opsec@ietf.org> > Subject: Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are

Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

2023-05-24 Thread Vasilenko Eduard
rd Cc: Fernando Gont ; Manfredi (US), Albert E ; IPv6 Operations ; 6man ; opsec@ietf.org Subject: Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS) +1 just that the ‘additional cost’ and the ’security risk’ are not sym

Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

2023-05-24 Thread Arnaud Taddei
3 8:12 AM > To: Fernando Gont mailto:fg...@si6networks.com>> > Cc: Manfredi (US), Albert E <mailto:albert.e.manfr...@boeing.com>>; IPv6 Operations <mailto:v6...@ietf.org>>; 6man mailto:i...@ietf.org>>; > opsec@ietf.org <mailto:opsec@ietf.org> > Subj

Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

2023-05-24 Thread Vasilenko Eduard
] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS) Would like to support Fernando again, and not just because I have a Sony TV too. Cybersecurity is in such a bad state that I can only plea for a sense of realism and pragmatism vs dogmatism to get

Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

2023-05-24 Thread Arnaud Taddei
Would like to support Fernando again, and not just because I have a Sony TV too. Cybersecurity is in such a bad state that I can only plea for a sense of realism and pragmatism vs dogmatism to get real solutions at hand to the defenders practitioners If not I will ask people here to consider

Re: [OPSEC] [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

2023-05-24 Thread Manfredi (US), Albert E
-Original Message- From: ipv6 On Behalf Of Fernando Gont > Given the amount of things that get connected to the Net (smart bulbs, > refrigerators, etc.) -- and that will super-likely never receive security > updates, you may have to **rely on your own network**. > > For instance, I