Layer 3 Virtual Private Network (VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 12
Abstract: The subtle way in which the IPv6 and IPv4 protocols coexist in typical networks, together with the lack of proper IPv6 support in popular Virtual Private Network (VPN) tunnel products, may inadvertently result in VPN tunnel traffic leakages. That is, traffic meant to be transferred over an encrypted and integrity- protected VPN tunnel may leak out of such a tunnel and be sent in the clear on the local network towards the final destination. This document discusses some scenarios in which such VPN tunnel traffic leakages may occur as a result of employing IPv6-unaware VPN software. Additionally, this document offers possible mitigations for this issue.
Publication Date: 2014-08-01
Status Note: Informational
DOI: 10.17487/RFC7359
Link: https://doi.org/10.17487/RFC7359
Author(s): Fernando Gont

Latest version of IETF RFC 7359

Document Versions — IETF RFC 7359

▶ IETF RFC 7359 (2014-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 4191 [Active*]
IETF RFC 4861 [Active*]
IETF RFC 6106 [Superseded*]
IETF RFC 6555 [Superseded*]
IETF RFC 6724 [Active*]

Bibliographic Reference(s)

The Hacker's Choice, "THC-IPV6 - attacking the IPV6 protocol suite", < http://www.thc.org/thc-ipv6/ >. EXTERNAL
SI6 Networks, "SI6 Networks' IPv6 Toolkit", < http://www.si6networks.com/tools/ipv6toolkit >. EXTERNAL
"rtadvd(8) manual page", < http://www.freebsd.org/cgi/ man.cgi?query=rtadvd&sektion=8 >. EXTERNAL
Gont, F., Liu, W., and G. Van de Velde, "DHCPv6-Shield: Protecting Against Rogue DHCPv6 Servers", Work in Progress, July 2014. EXTERNAL
Hoffman, P., "SSL VPNs: An IETF Perspective", IETF 72, SAAG Meeting, 2008, < http://www.ietf.org/proceedings/72/slides/saag-4.pdf >. EXTERNAL
IETF RFC 6105 [Active*]
IETF RFC 7113 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7359.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7359, Layer 3 Virtual Private Network (VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks. Available at https://doi.org/10.17487/RFC7359

Snippet:

IETF RFC 7359, Layer 3 Virtual Private Network (VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks. Available at https://doi.org/10.17487/RFC7359

HTML (ISO 690 compliant)

Preview:

IETF RFC 7359, Layer 3 Virtual Private Network (VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks. Available at https://doi.org/10.17487/RFC7359

Snippet:

<span class="citation"><cite>IETF RFC 7359</cite>, Layer 3 Virtual Private Network (VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks. Available at <a href="https://doi.org/10.17487/RFC7359" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7359</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7359, Layer 3 Virtual Private Network (VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks
doi: 10.17487/RFC7359
url: https://doi.org/10.17487/RFC7359

Snippet:

<li>
<cite id="bib-rfc7359">IETF RFC 7359</cite>, Layer 3 Virtual Private Network (VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks
<span class="doi">10.17487/RFC7359</span>
</li>

Referenced By

IETF RFC 7381 [Active*]
IETF RFC 8777 [Active*]
IETF RFC 9099 [Active*]