GTSM - Do you use it?

Fri Aug 18 01:08:00 UTC 2006

On Thu, Aug 17, 2006 at 05:14:57PM -0700, Merike Kaeo wrote:
> 
> I don't think that's a fair assumption.  A few providers I talked to  
> for a security current practiced document I am writing said they were  
> deploying it between BGP peers and I recently asked for more  
> clarification from some individuals to ensure I had correct info with  
> respect to vendors.  There is some support in some J boxes and also  
> support in C boxes.  I didn't get specific detail how it was  
> deployed, just that is was.

Juniper only suports GTSM on Gibson-based architectues (which is T640, 
T320, M320, and M120 today). Cisco only supports GTSM in a meaningful way 
on IOS XR on CRS-1. All IOS based platforms still check MD5 before TTL, 
and only do TTL checks in software, making it worthless for anything other 
than deploying it on sessions today and maybe making it do something 
useful tomorrow. I think XR on GSR support is limited too, but nobody runs 
that in production anyways. :)

And no, nobody seriously deploys GTSM today in any kind of scale. AFAIK no 
other vendors support it yet either, so requiring it on sessions is a 
non-starter.

-- 
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)