Hi authors, In the Security Considerations section of RFC9234, " Removing the OTC Attribute or changing its value can limit the opportunity for route leak detection. Such activity can be done on purpose as part of an on-path attack."
DO community should have similar vulnerabilities. Will the solution below be helpful for protecting DO community? https://datatracker.ietf.org/doc/draft-liu-sidrops-community-authentication/ Best, Nan -----Original Message----- From: internet-dra...@ietf.org <internet-dra...@ietf.org> Sent: Tuesday, August 27, 2024 7:26 AM To: i-d-annou...@ietf.org Cc: grow@ietf.org Subject: [GROW] I-D Action: draft-ietf-grow-route-leak-detection-mitigation-11.txt Internet-Draft draft-ietf-grow-route-leak-detection-mitigation-11.txt is now available. It is a work item of the Global Routing Operations (GROW) WG of the IETF. Title: Methods for Detection and Mitigation of BGP Route Leaks Authors: Kotikalapudi Sriram Alexander Azimov Name: draft-ietf-grow-route-leak-detection-mitigation-11.txt Pages: 10 Dates: 2024-08-26 Abstract: Problem definition for route leaks and enumeration of types of route leaks are provided in RFC 7908. This document describes a new well- known Large Community that provides a way for route-leak prevention, detection, and mitigation. The configuration process for this Community can be automated with the methodology for setting BGP roles that is described in RFC 9234. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-ietf-grow-route-leak-detection-mitigation/ There is also an HTMLized version available at: https://datatracker.ietf.org/doc/html/draft-ietf-grow-route-leak-detection-mitigation-11 A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-ietf-grow-route-leak-detection-mitigation-11 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ GROW mailing list -- grow@ietf.org To unsubscribe send an email to grow-le...@ietf.org _______________________________________________ GROW mailing list -- grow@ietf.org To unsubscribe send an email to grow-le...@ietf.org