nanog mailing list archives

Re: ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms


From: Töma Gavrichenkov <ximaera () gmail com>
Date: Fri, 8 Mar 2019 23:03:30 +0900

On Tue, Mar 5, 2019, 7:27 AM Mark Andrews <marka () isc org> wrote:

[..]

their inability to purchase
devices that work with RFC compliant data streams.


To prove your point, you may want to provide a sample list of devices that
work that way, along with the benchmarks showing that those devices could
still handle arbitrary junk ICMP packets at a line rate.

NB: Cloudflare is basically busy filtering excessive amounts of spoofed
ICMP packets containing whatever parameters and payload criminals could fit
into, at virtually no cost for a customer. Your list might become somewhat
short then.

--
Töma



Current thread: