The Generalized TTL Security Mechanism (GTSM)

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 11
Abstract: The use of a packet's Time to Live (TTL) (IPv4) or Hop Limit (IPv6) to protect a protocol stack from CPU-utilization based attacks has been proposed in many settings (see for example, RFC 2461). This document generalizes these techniques for use by other protocols such as BGP (RFC 1771), Multicast Source Discovery Protocol (MSDP), Bidirectional Forwarding Detection, and Label Distribution Protocol (LDP) (RFC 3036). While the Generalized TTL Security Mechanism (GTSM) is most effective in protecting directly connected protocol peers, it can also provide a lower level of protection to multi-hop sessions. GTSM is not directly applicable to protocols employing flooding mechanisms (e.g., multicast), and use of multi-hop GTSM should be considered on a case-by-case basis. This memo defines an Experimental Protocol for the Internet community.
Publication Date: 2004-02-01
Status Note: Experimental
DOI: 10.17487/RFC3682
Link: https://doi.org/10.17487/RFC3682
Author(s): Vijay Gill
John Heasley
David Meyer
Keyword(s): Time To Live, Packet Hop Limit

Latest version of IETF RFC 3682

Document Versions — IETF RFC 3682

▶ IETF RFC 3682 (2004-02-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

RFC5082 — RFC5082 EXTERNAL

Normative Reference(s)

Kent, S., C. Lynn, and K. Seo, "Secure Border Gateway Protocol (Secure-BGP)", IEEE Journal on Selected Areas in Communications, volume 18, number 4, April, 2000. EXTERNAL
Kent, S., C. Lynn, J. Mikkelson, and K. Seo, "Secure Border Gateway Protocol (S-BGP) -- Real World Performance and Deployment Issues", Proceedings of the IEEE Network and Distributed System Security Symposium, February, 2000. EXTERNAL
IETF RFC 791 [Active*]
IETF RFC 1771 [Superseded*]
IETF RFC 1772 [Active*]
IETF RFC 2003 [Active*]
IETF RFC 2119 [Active*]
IETF RFC 2385 [Superseded*]
IETF RFC 2461 [Superseded*]
IETF RFC 2784 [Active*]
RFC2842 — BGP-CAP EXTERNAL
IETF RFC 2893 [Superseded*]
IETF RFC 3032 [Active*]
IETF RFC 3036 [Superseded*]
IETF RFC 3392 [Superseded*]

Bibliographic Reference(s)

Empirical data gathered from the Sprint and AOL backbones, October, 2002. EXTERNAL
Katz, D. and D. Ward, "Bidirectional Forwarding Detection", Work in Progress, June 2003. EXTERNAL
IETF RFC 2028 [Superseded*]
IETF RFC 2434 [Superseded*]
IETF RFC 3618 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC3682.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 3682, The Generalized TTL Security Mechanism (GTSM). Available at https://doi.org/10.17487/RFC3682

Snippet:

IETF RFC 3682, The Generalized TTL Security Mechanism (GTSM). Available at https://doi.org/10.17487/RFC3682

HTML (ISO 690 compliant)

Preview:

IETF RFC 3682, The Generalized TTL Security Mechanism (GTSM). Available at https://doi.org/10.17487/RFC3682

Snippet:

<span class="citation"><cite>IETF RFC 3682</cite>, The Generalized TTL Security Mechanism (GTSM). Available at <a href="https://doi.org/10.17487/RFC3682" target="_blank" rel="noopener">https://doi.org/10.17487/RFC3682</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 3682, The Generalized TTL Security Mechanism (GTSM)
doi: 10.17487/RFC3682
url: https://doi.org/10.17487/RFC3682

Snippet:

<li>
<cite id="bib-rfc3682">IETF RFC 3682</cite>, The Generalized TTL Security Mechanism (GTSM)
<span class="doi">10.17487/RFC3682</span>
</li>

Referenced By

IETF RFC 4732 [Active*]