Security Implications of IPv6 on IPv4 Networks

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 19
Abstract: This document discusses the security implications of native IPv6 support and IPv6 transition/coexistence technologies on "IPv4-only" networks and describes possible mitigations for the aforementioned issues.
Publication Date: 2014-02-01
Status Note: Informational
DOI: 10.17487/RFC7123
Link: https://doi.org/10.17487/RFC7123
Author(s): Fernando Gont
Will (Shucheng) LIU

Latest version of IETF RFC 7123

Document Versions — IETF RFC 7123

▶ IETF RFC 7123 (2014-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 1035 [Active, Amended*]
IETF RFC 2460 [Superseded*]
IETF RFC 2529 [Active*]
IETF RFC 3053 [Active*]
IETF RFC 3056 [Active*]
IETF RFC 3068 [Superseded*]
IETF RFC 4033 [Active*]
IETF RFC 4035 [Active*]
IETF RFC 4380 [Active*]
IETF RFC 4795 [Active*]
IETF RFC 5214 [Active*]
IETF RFC 5569 [Active*]
IETF RFC 5572 [Active*]
IETF RFC 5969 [Active*]
IETF RFC 6147 [Active*]

Bibliographic Reference(s)

The Hacker's Choice, "THC-IPV6 - attacking the IPV6 protocol suite", December 2013, < http://www.thc.org/thc-ipv6/ >. EXTERNAL
Gont, F., "Virtual Private Network (VPN) traffic leakages in dual-stack hosts/ networks", Work in Progress, August 2013. EXTERNAL
Huston, G., "Flailing IPv6", The ISP Column: A monthly column on things Internet, December 2010, < http://www.potaroo.net/ispcol/2010-12/6to4fail.pdf >. EXTERNAL
Gont, F., "Implementation Advice for IPv6 Router Advertisement Guard (RA-Guard)", Work in Progress, November 2012. EXTERNAL
Waters, A., "The SLAAC Attack - using IPv6 as a weapon against IPv4", April 2011, < http://wirewatcher.wordpress.com/2011/04/04/ the-slaac-attack-using-ipv6-as-a-weapon-against-ipv4/ >. EXTERNAL
SI6 Networks, "SI6 Networks' IPv6 Toolkit", < http://www.si6networks.com/tools/ipv6toolkit >. EXTERNAL
IANA, "Ethernet Numbers", < http://www.iana.org/assignments/ethernet-numbers >. EXTERNAL
Gont, F., Liu, W., and G. Van de Velde, "DHCPv6-Shield: Protecting Against Rogue DHCPv6 Servers", Work in Progress, October 2013. EXTERNAL
Massar, J., "AYIYA: Anything In Anything" , Work in Progress, July 2004. EXTERNAL
Huston, G., "Bemused Eyeballs: Tailoring Dual Stack Applications in a CGN Environment", The ISP Column: A monthly column on things Internet, May 2012, < http://www.potaroo.net/ispcol/2012-05/notquite.pdf >. EXTERNAL
Giobbi, R., "Bypassing Firewalls with IPv6 Tunnels", CERT/ CC Blog, April 2009, < http://www.cert.org/blogs/vuls/2009/ 04/bypassing_firewalls_with_ipv6.html >. EXTERNAL
Anderson, T., "IPv6 dual-stack client loss in Norway", 2011, < http://www.fud.no/ipv6/ >. EXTERNAL
Gont, F., "Security Assessment of the Internet Protocol version 6 (IPv6)", UK Centre for the Protection of National Infrastructure, (available on request), . EXTERNAL
Anderson, T., "Measuring and combating IPv6 brokenness", RIPE 61, Roma, November 2010, < http://ripe61.ripe.net/presentations/162-ripe61.pdf >. EXTERNAL
SixXS, , "SixXS - IPv6 Deployment & Tunnel Broker :: Statistics", 2013, < http://www.sixxs.net/misc/usage/ >. EXTERNAL
Huston, G., "IPv6 Measurements", 2010, < http://www.potaroo.net/stats/1x1/ >. EXTERNAL
IETF RFC 793 [Superseded*]
IETF RFC 2663 [Active*]
IETF RFC 3756 [Active*]
IETF RFC 3964 [Active*]
IETF RFC 4301 [Active, Amended*]
IETF RFC 5246 [Superseded*]
IETF RFC 5461 [Active*]
IETF RFC 6101 [Active*]
IETF RFC 6105 [Active*]
IETF RFC 6169 [Active*]
IETF RFC 6343 [Active*]
IETF RFC 6540 [Active*]
IETF RFC 6555 [Superseded*]
IETF RFC 6762 [Active*]
IETF RFC 6763 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7123.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7123, Security Implications of IPv6 on IPv4 Networks. Available at https://doi.org/10.17487/RFC7123

Snippet:

IETF RFC 7123, Security Implications of IPv6 on IPv4 Networks. Available at https://doi.org/10.17487/RFC7123

HTML (ISO 690 compliant)

Preview:

IETF RFC 7123, Security Implications of IPv6 on IPv4 Networks. Available at https://doi.org/10.17487/RFC7123

Snippet:

<span class="citation"><cite>IETF RFC 7123</cite>, Security Implications of IPv6 on IPv4 Networks. Available at <a href="https://doi.org/10.17487/RFC7123" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7123</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7123, Security Implications of IPv6 on IPv4 Networks
doi: 10.17487/RFC7123
url: https://doi.org/10.17487/RFC7123

Snippet:

<li>
<cite id="bib-rfc7123">IETF RFC 7123</cite>, Security Implications of IPv6 on IPv4 Networks
<span class="doi">10.17487/RFC7123</span>
</li>

Referenced By

IETF RFC 7381 [Active*]
IETF RFC 8504 [Active*]
IETF RFC 9099 [Active*]