nanog mailing list archives
Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms
From: Fernando Gont <fgont () si6networks com>
Date: Tue, 5 Mar 2019 22:43:27 -0300
On 27/2/19 07:01, Jean-Daniel Pauget wrote:
hello, I confess using IPv6 behind a 6in4 tunnel because the "Business-Class" service of the concerned operator doesn't handle IPv6 yet. as such, I realised that, as far as I can figure, ICMPv6 packet "too-big" (rfc 4443) seem to be ignored or filtered at ~60% of ClouFlare's http farms as a result, random sites such as http://nanog.org/ or https://www.ansible.com/ are badly reachable whenever small mtu are involved ... support@cloudflare answered me that because I'm not the owner of concerned site, and because of security reasons, they wouldn't investigate further. are there security concerns with ICMP-too-big ?
Please see: https://tools.ietf.org/html/rfc5927 and also: https://tools.ietf.org/html/rfc8021 Thanks, -- Fernando Gont SI6 Networks e-mail: fgont () si6networks com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
Current thread:
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms, (continued)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Töma Gavrichenkov (Mar 08)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Saku Ytti (Mar 08)
- RE: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms adamv0025 (Mar 12)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Saku Ytti (Mar 12)
- RE: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms adamv0025 (Mar 12)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Saku Ytti (Mar 12)
- RE: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms adamv0025 (Mar 12)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Saku Ytti (Mar 12)
- RE: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms adamv0025 (Mar 13)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Masataka Ohta (Mar 09)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Jean-Daniel Pauget (Mar 08)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Saku Ytti (Mar 08)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Brandon Martin (Mar 08)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms Jeroen Massar (Mar 08)
- Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms William Herrin (Mar 08)