draft-nakibly-v6ops-tunnel-loops-02.txt

[Gabi Nakibly <gnakibly@yahoo.com>]

I would like to draw the attention of the list to a new version of the I-D titled "Routing Loop Attack using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations".
To remind you, the routing loop attack may be used to DoS any automatic IPv6-in-IPv4 tunnels. This version discusses the attack as it applies to all automatic tunnels in general (the previous version focused only on ISATAP and 6to4). It also suggests some possible mitigation measures.
I would be happy to get your feedback on the attack, the suggested mitigation measures and the importance of the draft.

Abstract

   This document is concerned with security vulnerabilities in IPv6-in-
   IPv4 automatic tunnels.  These vulnerabilities allow an attacker to
   take advantage of inconsistencies between a tunnel's overlay IPv6
   routing state and the native IPv6 routing state.  The attack forms a
   routing loop which can be abused as a vehicle for traffic
   amplification to facilitate DoS attacks.  The first aim of this
   document is to inform on this attack and its root causes.  The second
   aim is to present some possible mitigation measures.

http://tools.ietf.org/html/draft-nakibly-v6ops-tunnel-loops-02

Gabi