NDP DoS attack

Mikael Abrahamsson swmike at swm.pp.se
Sun Jul 17 09:35:27 UTC 2011


On Sun, 17 Jul 2011, Florian Weimer wrote:

> In practice, the IPv4 vs IPv6 difference is that some vendors provide 
> DHCP snooping, private VLANs and unicast flood protection in IPv4 land, 
> which seems to provide a scalable way to build Ethernet networks with 
> address validation---but there is nothing comparable for IPv6 right now, 
> from any vendor.

That is not true. Check out work and reports from the IETF SAVI WG. There 
are actually quite a few implementations out there, being used in 
production.

-- 
Mikael Abrahamsson    email: swmike at swm.pp.se




More information about the NANOG mailing list