Re: [savnet] WG Review: Source Address Validation in Intra-domain and Inter-domain Networks (savnet)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Dan,

> As for the definition of “valid”, it is the same as uRPF.

I beg to differ on this. 

uRPF is applied on a directly connected interfaces to the site. 

The moment you depart from that very point - you are compromising network resilience. And that worries me the most in this effort to be launched. 

Many thx,
Robert


On Sat, Jun 4, 2022 at 12:44 AM Dan Li <tolidan@xxxxxxxxxxxxxxx> wrote:

Hi Robert,

 

As for the definition of “valid”, it is the same as uRPF. Specifically, if there exists a feasible “forwarding path” from the “source prefix” to the incoming interface of a router, then the router regard the incoming packet as having a “valid incoming interface”. The only difference between SAVNET and uRPF is how to check the “forwarding path”, which is also the reason why uRPF has inaccuracy problem.

 

Best,

Dan


[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Mhonarc]     [Fedora Users]

  Powered by Linux