-
Notifications
You must be signed in to change notification settings - Fork 11
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
github-actions
committed
Sep 29, 2024
1 parent
5c98543
commit 8d7de71
Showing
5 changed files
with
214 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,183 @@ | ||
--- | ||
schema-version: v1.2.3 | ||
id: draft-li-sidrops-bicone-sav-05 | ||
title: | ||
- content: Bicone Source Address Validation | ||
language: | ||
- en | ||
script: | ||
- Latn | ||
format: text/plain | ||
link: | ||
- content: https://datatracker.ietf.org/doc/html/draft-li-sidrops-bicone-sav-05 | ||
type: src | ||
type: standard | ||
docid: | ||
- id: draft-li-sidrops-bicone-sav-05 | ||
type: Internet-Draft | ||
primary: true | ||
- id: I-D.li-sidrops-bicone-sav | ||
type: IETF | ||
scope: anchor | ||
docnumber: I-D.li-sidrops-bicone-sav | ||
date: | ||
- type: published | ||
value: '2024-09-28' | ||
contributor: | ||
- person: | ||
name: | ||
given: | ||
forename: | ||
- content: Dan | ||
language: | ||
- en | ||
- language: | ||
- en | ||
initial: D | ||
formatted_initials: | ||
content: D. | ||
language: | ||
- en | ||
surname: | ||
content: Li | ||
language: | ||
- en | ||
completename: | ||
content: Dan Li | ||
language: | ||
- en | ||
affiliation: | ||
- organization: | ||
name: | ||
- content: Tsinghua University | ||
role: | ||
- type: author | ||
- person: | ||
name: | ||
given: | ||
forename: | ||
- content: Lancheng | ||
language: | ||
- en | ||
- language: | ||
- en | ||
initial: L | ||
formatted_initials: | ||
content: L. | ||
language: | ||
- en | ||
surname: | ||
content: Qin | ||
language: | ||
- en | ||
completename: | ||
content: Lancheng Qin | ||
language: | ||
- en | ||
affiliation: | ||
- organization: | ||
name: | ||
- content: Zhongguancun Laboratory | ||
role: | ||
- type: author | ||
- person: | ||
name: | ||
given: | ||
forename: | ||
- language: | ||
- en | ||
initial: L | ||
formatted_initials: | ||
content: L. | ||
language: | ||
- en | ||
surname: | ||
content: Chen | ||
language: | ||
- en | ||
completename: | ||
content: Li Chen | ||
language: | ||
- en | ||
affiliation: | ||
- organization: | ||
name: | ||
- content: Zhongguancun Laboratory | ||
role: | ||
- type: author | ||
- person: | ||
name: | ||
given: | ||
forename: | ||
- content: Libin | ||
language: | ||
- en | ||
- language: | ||
- en | ||
initial: L | ||
formatted_initials: | ||
content: L. | ||
language: | ||
- en | ||
surname: | ||
content: Liu | ||
language: | ||
- en | ||
completename: | ||
content: Libin Liu | ||
language: | ||
- en | ||
affiliation: | ||
- organization: | ||
name: | ||
- content: Zhongguancun Laboratory | ||
role: | ||
- type: author | ||
version: | ||
- draft: '05' | ||
revdate: '2024-09-28' | ||
language: | ||
- en | ||
script: | ||
- Latn | ||
abstract: | ||
- content: "<p>The primary design goal of source address validation (SAV) is avoiding | ||
improper blocks (i.e., blocking legitimate traffic) while maintaining directionality, | ||
especially in partial deployment scenarios (see [I-D.ietf-savnet-inter-domain-problem-statement] | ||
and [RFC8704]). Existing advanced SAV solutions (e.g., EFP-uRPF [RFC8704]) typically | ||
generate ingress SAV allowlist filters on interfaces facing a customer or lateral | ||
peer AS. This document analyzes the potential improper block problems when using | ||
an allowlist. To avoid improper blocks, this document proposes a new SAV solution | ||
by generating an ingress SAV blocklist filter based on BGP updates, ROAs, and | ||
ASPAs related to the provider cone. In practice, network operators can flexibly | ||
decide to use a blocklist or an allowlist according to their requirements and | ||
actual conditions.</p>" | ||
language: | ||
- en | ||
script: | ||
- Latn | ||
format: text/html | ||
relation: | ||
- type: updates | ||
bibitem: | ||
id: draft-li-sidrops-bicone-sav-03 | ||
docid: | ||
- id: draft-li-sidrops-bicone-sav-03 | ||
type: Internet-Draft | ||
primary: true | ||
formattedref: | ||
content: draft-li-sidrops-bicone-sav-03 | ||
format: text/plain | ||
series: | ||
- type: main | ||
title: | ||
content: Internet-Draft | ||
language: | ||
- en | ||
script: | ||
- Latn | ||
format: text/plain | ||
number: draft-li-sidrops-bicone-sav-05 | ||
doctype: internet-draft | ||
ext: | ||
schema-version: v1.0.1 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file not shown.