IETF RFC 8704
[ACTIVE]
Enhanced Feasible-Path Unicast Reverse Path Forwarding
Metadata
- Publisher
- IETF
- Doc Type
- Best Practice
- Pages
- 17
- Abstract
- This document identifies a need for and proposes improvement of the unicast Reverse Path Forwarding (uRPF) techniques (see RFC 3704) for detection and mitigation of source address spoofing (see BCP 38). Strict uRPF is inflexible about directionality, the loose uRPF is oblivious to directionality, and the current feasible-path uRPF attempts to strike a balance between the two (see RFC 3704). However, as shown in this document, the existing feasible-path uRPF still has shortcomings. This document describes enhanced feasible-path uRPF (EFP-uRPF) techniques that are more flexible (in a meaningful way) about directionality than the feasible-path uRPF (RFC 3704). The proposed EFP-uRPF methods aim to significantly reduce false positives regarding invalid detection in source address validation (SAV). Hence, they can potentially alleviate ISPs' concerns about the possibility of disrupting service for their customers and encourage greater deployment of uRPF techniques. This document updates RFC 3704.
- Publication Date
- 2020-02-01
- Status Note
- Best Current Practice
- DOI
10.17487/RFC8704- Link
- https://doi.org/10.17487/RFC8704
- Author(s)
- Kotikalapudi SriramDoug MontgomeryJeffrey Haas
- Keyword(s)
- BGP, Source Address Validation, RPF, uRPF, DDoS, Ingress Filtering
Latest version of IETF RFC 8704
Document Versions — IETF RFC 8704
-
▶ IETF RFC 8704 (2020-02-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 2827 [Active*]
- IETF RFC 3704 [Active*]
- IETF RFC 4271 [Active*]
- IETF RFC 8174 [Active*]
Bibliographic Reference(s)
- 10.1145-2504730.2504735 — Luckie EXTERNAL
- IETF.draft-sriram-opsec-urpf-improvements-00 — Sriram-URPF EXTERNAL
- Cisco, "Cisco Nexus 7000 Series NX-OS Unicast Routing Configuration Guide, Release 5.x (Chapter 15: 'Managing the Unicast RIB and FIB')", March 2018, <https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/unicast/configuration/guide/l3_cli_nxos/l3_NewChange.html>. EXTERNAL
- IANA, "IANA IPv6 Special-Purpose Address Registry", <https://www.iana.org/assignments/iana-ipv6-special-registry/>. EXTERNAL
- Internet Society, "Addressing the challenge of IP spoofing", September 2015, <https://www.internetsociety.org/resources/doc/2015/addressing-the-challenge-of-ip-spoofing/>. EXTERNAL
- Juniper Networks, "Creating Unique VPN Routes Using VRF Tables", May 2019, <https://www.juniper.net/documentation/en_US/junos/topics/topic-map/l3-vpns-routes-vrf-tables.html#id-understanding-virtual-routing-and-forwarding-tables>. EXTERNAL
- Firmin, F., "The Evolved Packet Core", <https://www.3gpp.org/technologies/keywords-acronyms/100-the-evolved-packet-core>. EXTERNAL
- IANA, "IANA IPv4 Special-Purpose Address Registry", <https://www.iana.org/assignments/iana-ipv4-special-registry/>. EXTERNAL
- CAIDA, "Information for AS 174 (COGENT-174)", October 2019, <https://spoofer.caida.org/as.php?asn=174>. EXTERNAL
- Sriram, K. and R. Bush, "Estimating CPU Cost of BGPSEC on a Router", Presented at RIPE 63 and at the SIDR WG meeting at IETF 83, March 2012, <http://www.ietf.org/proceedings/83/slides/slides-83-sidr-7.pdf>. EXTERNAL
- Cisco, "Internet Routing Table Growth Causes %ROUTING-FIB-4-RSRC_LOW Message on Trident-Based Line Cards", January 2014, <https://www.cisco.com/c/en/us/support/docs/routers/asr-9000-series-aggregation-services-routers/116999-problem-line-card-00.html>. EXTERNAL
- IETF RFC 4036 [Active*]
- IETF RFC 4364 [Active*]
- RFC6482 — RFC6482 EXTERNAL
- RFC6811 — RFC6811 EXTERNAL
- RFC7454 — RFC7454 EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC8704.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 8704, Enhanced Feasible-Path Unicast Reverse Path Forwarding. Available at https://doi.org/10.17487/RFC8704
Snippet:
IETF RFC 8704, Enhanced Feasible-Path Unicast Reverse Path Forwarding. Available at https://doi.org/10.17487/RFC8704
HTML (ISO 690 compliant)
Preview:
IETF RFC 8704, Enhanced Feasible-Path Unicast Reverse Path Forwarding. Available at https://doi.org/10.17487/RFC8704
Snippet:
<span class="citation"><cite>IETF RFC 8704</cite>, Enhanced Feasible-Path Unicast Reverse Path Forwarding. Available at <a href="https://doi.org/10.17487/RFC8704" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8704</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 8704, Enhanced Feasible-Path Unicast Reverse Path Forwarding
doi: 10.17487/RFC8704
url: https://doi.org/10.17487/RFC8704
doi: 10.17487/RFC8704
url: https://doi.org/10.17487/RFC8704
Snippet:
<li> <cite id="bib-rfc8704">IETF RFC 8704</cite>, Enhanced Feasible-Path Unicast Reverse Path Forwarding <span class="doi">10.17487/RFC8704</span> </li>