SAVNET-ProblemStatement-Architecture / Inter-domain-problem-statement

3 stars 0 forks source link

9. If an AS detects and drops spoofed traffic, it benefits even if that AS is not the target of the spoofing attack. That is because the AS can avoid the burden of having a large amount of illegitimate traffic pass through and clog its resources. Also, the AS’s own paying customer may be the target of the spoofing attack. From Sriram [after ietf 114] #9

Open XiaoTianCan opened 1 year ago

XiaoTianCan commented 1 year ago

Response and revision summary: Agree that existing SAV can protect own network and customers, which provides some deployment incentive for network operators. The draft shows some scenarios where existing SAV may fail to block spoofing packets and consequently harm the deployment incentive. That is to say, if the accuracy gap can be narrowed, the network operators will be more likely to deploy SAV. The facts you presented are not contradictory to the draft. The incentive part in the draft has be updated to make the above thoughts clear.