Routing Loop Attack Using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 19
Abstract: This document is concerned with security vulnerabilities in IPv6-in- IPv4 automatic tunnels. These vulnerabilities allow an attacker to take advantage of inconsistencies between the IPv4 routing state and the IPv6 routing state. The attack forms a routing loop that can be abused as a vehicle for traffic amplification to facilitate denial- of-service (DoS) attacks. The first aim of this document is to inform on this attack and its root causes. The second aim is to present some possible mitigation measures. It should be noted that at the time of this writing there are no known reports of malicious attacks exploiting these vulnerabilities. Nonetheless, these vulnerabilities can be activated by accidental misconfiguration. This document is not an Internet Standards Track specification; it is published for informational purposes.
Publication Date: 2011-08-01
Status Note: Informational
DOI: 10.17487/RFC6324
Link: https://doi.org/10.17487/RFC6324
Author(s): Gabi Nakibly
Fred Templin
Keyword(s): Encapsulation, ISATAP, 6rd

Latest version of IETF RFC 6324

Document Versions — IETF RFC 6324

▶ IETF RFC 6324 (2011-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1918 [Active*]
IETF RFC 3056 [Active*]
IETF RFC 3315 [Superseded*]
IETF RFC 3633 [Superseded*]
IETF RFC 4213 [Active*]
IETF RFC 4861 [Active*]
IETF RFC 5214 [Active*]
IETF RFC 5969 [Active*]

Bibliographic Reference(s)

Templin, F., "Operational Guidance for IPv6 Deployment in IPv4 Sites using ISATAP", Work in Progress, July 2011. EXTERNAL
Templin, F., Ed., "Asymmetric Extended Route Optimization (AERO)", Work in Progress, June 2011. EXTERNAL
Gont, F., "Mitigating Teredo Rooting Loop Attacks" , Work in Progress, September 2010. EXTERNAL
Nakibly, G. and M. Arov, "Routing Loop Attacks using IPv6 Tunnels", USENIX WOOT, August 2009. EXTERNAL
IETF RFC 4380 [Active*]
IETF RFC 4732 [Active*]
IETF RFC 6343 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6324.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6324, Routing Loop Attack Using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations. Available at https://doi.org/10.17487/RFC6324

Snippet:

IETF RFC 6324, Routing Loop Attack Using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations. Available at https://doi.org/10.17487/RFC6324

HTML (ISO 690 compliant)

Preview:

IETF RFC 6324, Routing Loop Attack Using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations. Available at https://doi.org/10.17487/RFC6324

Snippet:

<span class="citation"><cite>IETF RFC 6324</cite>, Routing Loop Attack Using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations. Available at <a href="https://doi.org/10.17487/RFC6324" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6324</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6324, Routing Loop Attack Using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations
doi: 10.17487/RFC6324
url: https://doi.org/10.17487/RFC6324

Snippet:

<li>
<cite id="bib-rfc6324">IETF RFC 6324</cite>, Routing Loop Attack Using IPv6 Automatic Tunnels: Problem Statement and Proposed Mitigations
<span class="doi">10.17487/RFC6324</span>
</li>

Referenced By

IETF RFC 7526 [Active*]
IETF RFC 7599 [Active*]