Re: [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)
Fernando Gont <[email protected]>
| Newsgroups | gmane.ietf.opsec,gmane.ietf.v6ops,gmane.ietf.ipv6 |
|---|---|
| Organization | SI6 Networks |
| Message-ID | <[email protected]> |
Hi, Eduard, On 25/5/23 07:21, Vasilenko Eduard wrote: > IMHO: Fernando comes here with a good example (EH DoS). Security is a good reason to block EHs. > But for business, every feature should be tested, supported, and somebody should pay an additional performance penalty. > I am not sure which reason is bigger: additional cost or security risk. It depends on the organization type. Therein lies the issue: If I have no use for it, why should I accept the risk? -- "no, thank you"... and move to an issue that actually requires a lot of analysis to address :-) Thanks, -- Fernando Gont SI6 Networks e-mail: [email protected] PGP Fingerprint: F242 FF0E A804 AF81 EB10 2F07 7CA1 321D 663B B494