[rrg] Fundamental objections to ahost-basedscalableroutingsolution

Tony Li tony.li at tony.li
Thu Nov 27 11:11:26 PST 2008


 

|I don't see why we can't enforce anti-spoofing on encap, since it
|requires a mapping to be in place.  And we can on decap easily 
|where the
|traffic is symetrical (that is there is a mapping for the source
|RLOC/EID pair.


Ok, but what about asymmetric decap?  That implies that the ETR does a
mapping lookup on the receipt of a packet, buffers the packet until the
lookup succeeds, and the does the compare.  This seems like another fine way
of DoSing the ETR.

Tony



More information about the rrg mailing list