Difference between revisions of "VPP/Features/IPv6"
From fd.io
(One intermediate revision by the same user not shown) | |||
Line 3: | Line 3: | ||
== Implementation issues == | == Implementation issues == | ||
− | * HBH processed by default and limited to IOAM. Risk of DOS attack | + | * [Done] HBH processed by default and limited to IOAM. Risk of DOS attack |
* Disable MLD by default | * Disable MLD by default | ||
* Disable sending RA by default | * Disable sending RA by default | ||
* Add more states in ND | * Add more states in ND | ||
* Move TTL check. Currently don't before locally received packets. | * Move TTL check. Currently don't before locally received packets. | ||
+ | * Drop forwarding of packets with invalid source (::, ::1) | ||
+ | * Handle link-local addresses in applications, e.g. ping. Ensure packets are not forwarded outside of zone | ||
+ | * Use the flow label and 3 tuple ECMP by default | ||
+ | * Add source dependent routing support |
Latest revision as of 10:27, 8 June 2016
IPv6 implementation description
Implementation issues
- [Done] HBH processed by default and limited to IOAM. Risk of DOS attack
- Disable MLD by default
- Disable sending RA by default
- Add more states in ND
- Move TTL check. Currently don't before locally received packets.
- Drop forwarding of packets with invalid source (::, ::1)
- Handle link-local addresses in applications, e.g. ping. Ensure packets are not forwarded outside of zone
- Use the flow label and 3 tuple ECMP by default
- Add source dependent routing support