ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms

Fri Mar 8 14:03:30 UTC 2019

On Tue, Mar 5, 2019, 7:27 AM Mark Andrews <marka at isc.org> wrote:

> [..]

their inability to purchase
> devices that work with RFC compliant data streams.
>

To prove your point, you may want to provide a sample list of devices that
work that way, along with the benchmarks showing that those devices could
still handle arbitrary junk ICMP packets at a line rate.

NB: Cloudflare is basically busy filtering excessive amounts of spoofed
ICMP packets containing whatever parameters and payload criminals could fit
into, at virtually no cost for a customer. Your list might become somewhat
short then.

--
Töma

>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190308/b5209d1d/attachment.html>