Re: [EXTERNAL] Re: [IPv6] [v6ops] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

Fernando Gont <[email protected]>
Newsgroups gmane.ietf.opsec,gmane.ietf.v6ops,gmane.ietf.ipv6
Organization SI6 Networks
Message-ID <[email protected]>
Hi, Eduard,

On 25/5/23 07:21, Vasilenko Eduard wrote:
> IMHO: Fernando comes here with a good example (EH DoS). Security is a good reason to block EHs.
> But for business, every feature should be tested, supported, and somebody should pay an additional performance penalty.
> I am not sure which reason is bigger: additional cost or security risk. It depends on the organization type.

Therein lies the issue: If I have no use for it, why should I accept the 
risk? -- "no, thank you"... and move to an issue that actually requires 
a lot of analysis to address :-)

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: [email protected]
PGP Fingerprint: F242 FF0E A804 AF81 EB10 2F07 7CA1 321D 663B B494
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.