netsec-sig - Re: [Security-WG] I2 - Routing security survey results

Subject: Internet2 Network Security SIG

List archive

Re: [Security-WG] I2 - Routing security survey results

From: "Dale W. Carder" <>
To:
Subject: Re: [Security-WG] I2 - Routing security survey results
Date: Fri, 2 Dec 2016 11:01:04 -0600
Ironport-phdr: 9a23:1ysRrBK3gS2z0u5bydmcpTZWNBhigK39O0sv0rFitYgRL/3xwZ3uMQTl6Ol3ixeRBMOAuqkC17Gd7/2ocFdDyK7JiGoFfp1IWk1NouQttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBXdrXKo8DEdBAj0OxZrKeTpAI7SiNm82/yv95HJbQhFgDSwbal9IRi4ogncuckbipZ+J6gszRfEvmFGcPlMy2NyIlKTkRf85sOu85Nm7i9dpfEv+dNeXKvjZ6g3QqBWAzogM2Au+c3krgLDQheV5nsdSWoZjBxFCBXY4R7gX5fxtiz6tvdh2CSfIMb7Q6w4VSik4qx2ThLjlSUJOCMj8GzPhMJ+jLxVrg+iqRxxzIHbfJyaO/hwca7GYdMWWXBMUtpNWyFbHI+xaZYEAeobPeZfqonwv1UCoxWkCgmoGuzk1z9HimXr1qAkyeshCxzJ0xI6H94ArX/Zq8j6NakOXu+v1qnH0CvMb+lN1Djj84jEaBYhru+QXb9pd8fa1EchFwTAjlqKqIzlOSuY1uIXvGid6OpgWviji2k9qwF+pDWk28QiipHRi44I1FzJ9j91zYgvKdC3VUJ3e9+pHZhIuyyVNYZ6WM0vTmFytConyrAKpYS3cDUKxZkkwRPUduaJfJKS4h35UeacOTd4i2xheLK4nxuy/1avx+PmWsmwy1lKqjBJktbLtnATzxDT686HReVh/kq5xDqDyQPe5vtKLEwumqfXNoQtz78zm5YLtETMBC72mEH4jK+McUUk//Cl5PnpY7r6vJCcLZJ7hR/kMqk1hMO/Gv40Mg4QUGiH4ei8zqHs/VXlQLVWif07irLZv47GKsQGvK65AhNV04Y65xexADery9AYnXgcLFJZYxKLkZLlO1DIIPDkE/i/mVKsnyl3x/zYJLHuHIjCLmWQ2IvmKK1w4FNGyRYiiM9Qz5NSFrwbJv/vAAn8uMGLIAU+Nln+7+/jBZ1CkMs1UHiDD7XTePferlSB/O4iOcGBf8kTtSqreKtt3OLnkXJswQxVRqKux5ZCMH0=

Thus spake gcbrowni
()
on Fri, Dec 02, 2016 at 11:12:45AM -0500:
>
> I think our target list is Juniper, Cisco (multiple types) and Brocade.
>
> Anything else have enough traction to put effort in to? ALU?

ALU can do the ttl check for bgp and ldp, and tcp-ao is supported I
think for hmac-sha-1-96 and aes-128-cmac-96.

You might find this survey interesting:
https://www.nanog.org/sites/default/files/Hankins_Snijders_Peering_Security.pdf

Presumably we all could look at our peers' advertised capabilities as well ;-)

Dale

--
Dale W. Carder
Energy Sciences Network (ESnet)
Scientific Networking Division
Lawrence Berkeley National Laboratory

[Security-WG] I2 - Routing security survey results, gcbrowni, 12/01/2016
- <Possible follow-up(s)>
- Re: [Security-WG] I2 - Routing security survey results, John Kristoff, 12/01/2016
  - RE: [Security-WG] I2 - Routing security survey results, Michael Hare, 12/01/2016
    - Re: [Security-WG] I2 - Routing security survey results, Brad Fleming, 12/01/2016
  - Re: [Security-WG] I2 - Routing security survey results, gcbrowni, 12/02/2016
    - Re: [Security-WG] I2 - Routing security survey results, Michael H Lambert, 12/02/2016
      - Re: [Security-WG] I2 - Routing security survey results, gcbrowni, 12/02/2016
        
        Re: [Security-WG] I2 - Routing security survey results, Dale W. Carder, 12/02/2016

List archive

Re: [Security-WG] I2 - Routing security survey results