nanog mailing list archives
Re: Using IPv6 with prefixes shorter than a /64 on a LAN
From: Mikael Abrahamsson <swmike () swm pp se>
Date: Mon, 31 Jan 2011 07:58:28 +0100 (CET)
On Sun, 30 Jan 2011, Matthew Petach wrote:
Even without completely overflowing the ND cache, informal lab testing shows that a single laptop on a well-connected network link can send sufficient packets at a very-large-scale backbone router's connected /64 subnet to keep the router CPU at 90%, sustained, for as long as you'd like. So, while it's not a direct denial of service (the network keeps functioning, albeit under considerable pain), it's enough to impact the ability of the network to react to other dynamic loads. :/
At AMSIX, a Cisco 12000 running IOS will get into trouble with the 170pps of ND seen there. AMSIX doesn't do MLD snooping so everybody gets everything and on IOS 12000 ND is punted to RP and when it's busy with calculating BGP, it'll start dropping BGP sessions.
An access-list filtering IPv6 multicast the router isn't subscribed to fixes the problem.
-- Mikael Abrahamsson email: swmike () swm pp se
Current thread:
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN, (continued)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Owen DeLong (Jan 31)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Michael Dillon (Jan 31)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Owen DeLong (Jan 31)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Owen DeLong (Jan 25)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Ray Soucy (Jan 26)
- RE: Using IPv6 with prefixes shorter than a /64 on a LAN George Bonser (Jan 25)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Fernando Gont (Jan 25)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Matthew Petach (Jan 30)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Fernando Gont (Jan 30)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Matthew Petach (Jan 31)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Mikael Abrahamsson (Jan 30)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Per Carlson (Jan 31)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Mikael Abrahamsson (Jan 31)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Mark Andrews (Jan 24)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Owen DeLong (Jan 24)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN sthaug (Jan 24)
- Re: Using IPv6 with prefixes shorter than a /64 on a LAN Mark Smith (Jan 25)