[rrg] Fundamental objections to ahost-basedscalableroutingsolution
Tony Li
tony.li at tony.li
Thu Nov 27 11:11:26 PST 2008
|I don't see why we can't enforce anti-spoofing on encap, since it
|requires a mapping to be in place. And we can on decap easily
|where the
|traffic is symetrical (that is there is a mapping for the source
|RLOC/EID pair.
Ok, but what about asymmetric decap? That implies that the ETR does a
mapping lookup on the receipt of a packet, buffers the packet until the
lookup succeeds, and the does the compare. This seems like another fine way
of DoSing the ETR.
Tony
More information about the rrg
mailing list