I-D Action: draft-qin-savnet-bicone-sav-01.txt

Internet-Draft draft-qin-savnet-bicone-sav-01.txt is now available.

   Title:   Bicone Source Address Validation
   Authors: Lancheng Qin
            Dan Li
            Li Chen
            Libin Liu
   Name:    draft-qin-savnet-bicone-sav-01.txt
   Pages:   14
   Dates:   2026-08-17

Abstract:

   Source address validation (SAV) aims to detect source-spoofed traffic
   while avoiding improper blocking of legitimate traffic.  Existing SAV
   mechanisms commonly rely on ingress allowlist filters on interfaces
   facing customer or lateral peer Autonomous Systems (ASes).  When such
   an allowlist is incomplete, a source address not covered by the
   allowlist cannot be conclusively identified as spoofed, because
   legitimate source prefixes may be missing from the allowlist.  This
   document describes Bicone SAV, which jointly uses an allowlist
   derived from customer-cone information and a blocklist containing
   prefixes that can be positively identified as inappropriate on the
   corresponding ingress interface.  When the allowlist is incomplete,
   packets matching the allowlist are permitted, packets matching the
   blocklist are discarded, and packets matching neither list are
   permitted with logging or other monitoring for subsequent analysis.
   The blocklist can be constructed from provider-cone information and
   augmented with denylist information derived from customer cones.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-qin-savnet-bicone-sav/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-qin-savnet-bicone-sav-01.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-qin-savnet-bicone-sav-01

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]