[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Control Plane Security of ISP Network
- To: email@example.com, "J.A. Terranson" <firstname.lastname@example.org>
- Subject: Re: Control Plane Security of ISP Network
- From: David Barak <email@example.com>
- Date: Mon, 6 Jun 2005 10:28:05 -0700 (PDT)
- Cc: firstname.lastname@example.org
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=g9YeG5vSQ9ITQdSkUbfNL3zjAViQLB/yvpruAUMEP/rstI7kqBsWIdGD992r4bs5ZyITSmoZw9znKx8mow2MYXHmljM5Nmf53+OyS2G0a9frFcKDxnmUOCn67GtvnFKZhpVFcpbB3W03n5x+OSK5ap/PDBE3IlKsiNzKEGuBXFk= ;
- In-reply-to: <email@example.com>
--- George Jones <firstname.lastname@example.org> wrote:
> On 6/6/05, J.A. Terranson <email@example.com> wrote:
> > On Mon, 6 Jun 2005 firstname.lastname@example.org
> > > Does anyone have a clear definition of "in-band"
> vs. "out-of-band" in this
> > > case?
> > I think a path based answer to that question would
> be more appropriate.
> > The method of carriage (IP/serial/whatever) is
> irrelevent to the question.
> > What really matters is whether the two paths
> (IB/OOB) ever meet. At the
> > point they meet, you become "in band".
> If things go down the same path, they are not
> separate (but then see
> Chris' later
> observation about bandwidth reservations). In the
> general case you want
> the separation to include all resources, not just
Let me nitpick meaningfully: I think that what we want
is not separation, but rather the situation where the
control plane can affect the workings of the data
plane, but not the reverse, right?
This brings to mind how a lot of Frame and ATM
switches work - while switches will do some limited
signalling to each other in-band, no amount of
resource exhaustion on the data plane can affect the
Is this correct?
Need Geek Rock? Try The Franchise:
Find restaurants, movies, travel and more fun for the weekend. Check it out!