On 08/10/2025 21:30, Nick Buraglio wrote:
The list was certainly not intended to be ordered, we will update to
bullet points and, just for further clarity, add We can certainly add in
some text to the effect of:
- The prefix defined in [RFC9602]
- ULA addresses
- GUA addresses
Further, I do agree that RFC9602 is the best possible option, albeit not
the only one. How does this sound?
"RFC9602 allocates and makes a dedicated prefix available for SRv6 SIDs
for use inside of a trusted SRv6 domain. Use of other prefixes for this
purpose will result in further security considerations such as, but not
limited to potential SID pool route leakage or more complicated
filtering requirements. As stated in the security considerations section
of RFC 9602, the usage of the prefix allocated by this document
[RFC9602] improves security by making it simpler to filter traffic at
the edge of the SR Domains.
Or something to that effect.
Thoughts?
I like the text, and I'd happily accept it as a compromise to go into
the document.
--
Tom
_______________________________________________
spring mailing list -- [email protected]
To unsubscribe send an email to [email protected]
