nanog mailing list archives

Re: SRv6 Capable NOS and Devices


From: Sander Steffann <sander () steffann nl>
Date: Wed, 12 Jan 2022 23:52:41 +0100

Hi Randy,

this is quite true, and a serious issue.  but it has a good side.  if
you run an ipv6 enebled network, you can deploy srv6 without enabling
srv6 everywhere, only at the marking encaps or embed) points.  nice for
partial and/or incremental deployment.

Yep, that's what I like about it! But I haven't figured out a way to mitigate the risks. Easy deployment == easy abuse 
it seems :(

Cheers,
Sander


Current thread: