Andrew,

To me the fact that SRv6 is using IPv6 ethertype is a feature not a bug. It
allows seamless deployment in any IPv6 enabled network.

Yes I personally suggested a new ethertype for SRv6 long time back, but the
issue was related to hurdles with IPv6 standards not related to any
"security" issues.

IP packets go from and two depending on their src and dst addresses. So
network(s) which fail to properly automate filtering of external packets
targeted to their internal infrastructure should be decommissioned, not
packets ethertype should change to keep those alive just to prevent IP
packets from "escaping" a domain.

Last but not least, sending SRv6 services over completely unaware Internet
underlay is very useful. Just think about mobile services as an example.

So I wish you all the best with srv6-td.

Kind regards,
Robert
_______________________________________________
spring mailing list
spring@ietf.org
https://www.ietf.org/mailman/listinfo/spring

Reply via email to