Le 03/03/2024 à 11:23, Gert Doering via Starlink a écrit :
Hi,
On Tue, Feb 13, 2024 at 07:11:16PM +0100, Alexandre Petrescu via Starlink wrote:
sorry, it could be that I have it on the wrong side.
If VRRP and starlink like to have that IPv6 LL address with ff:fe inside,
and always constant, so be it. There might be some reasons for it to be that
way.
It's not unusual to standardize IPv6 gateway addresses to have always
well-known fe80:: addresses (like, fe80::1).
I am not sure fe80::1 as a default route is standardized in an RFC, so
to say?
I can agree though it is often used in practice.
There is nothing for an adversary to be gained here. If you are on-link,
you know, and if you are not, anything fe80:: is of no use to you.
Yes, I agree.
Just that some times one can get on-link because one legitimately has
the credentials, yet one does not know the default route, because it
does not come from an RA but from a link-layer message exchange which
might be difficult (impossible some times) to capture.
I am not saying it is good or bad, just I detail the perspective, for
the sake of discussion.
Alex
Gert Doering
-- NetMaster
_______________________________________________
Starlink mailing list
Starlink@lists.bufferbloat.net
https://lists.bufferbloat.net/listinfo/starlink
