IP DSCP across the Internet

Randy Bush randy at psg.com
Wed May 6 05:48:40 UTC 2015


> We don't honor DSCP values that comes in via best-effort circuits
> (i.e., the Internet). Although not a very strong reason, this
> particular experience is one reason why.

trusting markings of any sort which you do not need is an increase in
attack, game playing, and/or bug surface.  the only thing i would pass
is ecn.

randy



More information about the NANOG mailing list