randy/draft-rov-no-rr
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

-01 with stronger reccos and seccons

Browse source
This commit is contained in:
Randy Bush 2021-11-12 13:40:08 -08:00
parent f27bab03fb
commit 3d02593371
1 changed files with 26 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

28
draft-ymbk-sidrops-rov-no-rr.xml
View file

@ -80,6 +80,7 @@
<t> <t>
A BGP Speaker performing RPKI-based Route Origin Validation should A BGP Speaker performing RPKI-based Route Origin Validation should
not issue Route Refresh to its neighbors when receiving new VRPs. not issue Route Refresh to its neighbors when receiving new VRPs.
A method for avoiding doing so is described.
</t> </t>
</abstract> </abstract>
@ -122,17 +123,20 @@
<section anchor="related" title="Related Work"> <section anchor="related" title="Related Work">
<t>It is assumed that the reader understands BGP, <xref <t>
It is assumed that the reader understands BGP, <xref
target="RFC4271"/> and Route Refresh <xref target="RFC7313"/>, the target="RFC4271"/> and Route Refresh <xref target="RFC7313"/>, the
RPKI <xref target="RFC6480"/>, Route Origin Authorizations (ROAs), RPKI <xref target="RFC6480"/>, Route Origin Authorizations (ROAs),
<xref target="RFC6482"/>, The Resource Public Key Infrastructure <xref target="RFC6482"/>, The Resource Public Key Infrastructure
(RPKI) to Router Protocol <xref target="I-D.ietf-sidrops-8210bis"/>, (RPKI) to Router Protocol <xref
RPKI-based Prefix Validation, <xref target="RFC6811"/>, and Origin target="I-D.ietf-sidrops-8210bis"/>, RPKI-based Prefix Validation,
Validation Clarifications, <xref target="RFC8481"/>.</t> <xref target="RFC6811"/>, and Origin Validation Clarifications,
<xref target="RFC8481"/>.
</t>
</section> </section>
<section anchor="ops" title="Operational Considerations"> <section anchor="ops" title="Operational Recommendations">
<t> <t>
Routers MUST either keep the full Adj-RIB-In or implement this Routers MUST either keep the full Adj-RIB-In or implement this
@ -155,7 +159,7 @@
<t> <t>
If the router has insufficient resources to support this, it If the router has insufficient resources to support this, it
SHOULD not be used for Route Origin Validation. MUST not be used for Route Origin Validation.
</t> </t>
</section> </section>
@ -163,8 +167,14 @@
<section anchor="Security" title="Security Considerations"> <section anchor="Security" title="Security Considerations">
<t> <t>
This document adds no additional security considerations to those This document describes a denial of service Route Origin
already described by the referenced documents. Validation may place on a BGP neighbor, and describes how it may
be ameliorated.
</t>
<t>
Otherwise, this document adds no additional security considerations
to those already described by the referenced documents.
</t> </t>
</section> </section>
@ -196,6 +206,7 @@
<?rfc include="reference.RFC.6480.xml"?> <?rfc include="reference.RFC.6480.xml"?>
</references> </references>
<!--
<section anchor="Acknowledgements" title="Acknowledgements"> <section anchor="Acknowledgements" title="Acknowledgements">
<t> <t>
@ -203,6 +214,7 @@
</t> </t>
</section> </section>
-->
</back> </back>