IETF RFC 9098
[ACTIVE]
Operational Implications of IPv6 Packets with Extension Headers
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 17
- Abstract
- This document summarizes the operational implications of IPv6 extension headers specified in the IPv6 protocol specification (RFC 8200) and attempts to analyze reasons why packets with IPv6 extension headers are often dropped in the public Internet.
- Publication Date
- 2021-09-01
- Status Note
- Informational
- DOI
10.17487/RFC9098- Link
- https://doi.org/10.17487/RFC9098
- Author(s)
- Fernando GontNick HilliardGert DöringWarren KumariGeoff HustonWill (Shucheng) LIU
Latest version of IETF RFC 9098
Document Versions — IETF RFC 9098
-
▶ IETF RFC 9098 (2021-09-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 5095 [Active*]
- IETF RFC 5722 [Active*]
- IETF RFC 6946 [Active*]
- IETF RFC 6980 [Active*]
- IETF RFC 7112 [Active*]
- IETF RFC 8021 [Active*]
- IETF RFC 8200 [Active*]
- IETF RFC 8504 [Active*]
Bibliographic Reference(s)
- 10.1109-INFOCOM41043.2020.9155387 — Almeida-2020 EXTERNAL
- IETF.draft-ietf-opsec-ipv6-eh-filtering-08 — I-D.ietf-opsec-ipv6-eh-filtering EXTERNAL
- IETF.draft-kampanakis-6man-ipv6-eh-parsing-01 — I-D.kampanakis-6man-ipv6-eh-parsing EXTERNAL
- IETF.draft-taylor-v6ops-fragdrop-02 — FRAGDROP EXTERNAL
- IETF.draft-wkumari-long-headers-03 — I-D.wkumari-long-headers EXTERNAL
- Jaeggli, J., "IPv6 flow label: misuse in hashing", APNIC Blog, January 2018, <https://blog.apnic.net/2018/01/11/ipv6-flow-label-misuse-hashing/>. EXTERNAL
- Scudder, J., "Modern router architecture and IPv6", APNIC Blog, June 2020, <https://blog.apnic.net/2020/06/04/modern-router-architecture-and-ipv6/>. EXTERNAL
- Linkova, J. and F. Gont, "IPv6 Extension Headers in the Real World v2.0", IEPG 90, July 2014, <http://www.iepg.org/2014-07-20-ietf90/iepg-ietf90-ipv6-ehs-in-the-real-world-v2.0.pdf>. EXTERNAL
- The FreeBSD Project, "IPv6 Hop-by-Hop options use-after-free bug", September 2020, <https://www.freebsd.org/security/advisories/FreeBSD-SA-20:24.ipv6.asc>. EXTERNAL
- Cisco, "Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability", June 2015, <http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150611-iosxr>. EXTERNAL
- De Boer, M. and J. Bosma, "Discovering Path MTU black holes on the Internet using RIPE Atlas", University of Amsterdam, MSc. Systems & Network Engineering, July 2012, <http://www.nlnetlabs.nl/downloads/publications/pmtu-black-holes-msc-thesis.pdf>. EXTERNAL
- Zack, E., "Firewall Security Assessment and Benchmarking IPv6 Firewall Load Tests", IPv6 Hackers Meeting #1, June 2013, <https://www.ipv6hackers.org/files/meetings/ipv6-hackers-1/zack-ipv6hackers1-firewall-security-assessment-and-benchmarking.pdf>. EXTERNAL
- Atlasis, A., "A Novel Way of Abusing IPv6 Extension Headers to Evade IPv6 Security Devices", May 2014, <http://www.insinuator.net/2014/05/a-novel-way-of-abusing-ipv6-extension-headers-to-evade-ipv6-security-devices/>. EXTERNAL
- Cisco, "IPv6 Extension Headers Review and Considerations", October 2006, <http://www.cisco.com/en/US/technologies/tk648/tk872/technologies_white_paper0900aecd8054d37d.pdf>. EXTERNAL
- Huston, G., "Measurement of IPv6 Extension Header Support", NPS/CAIDA 2020 Virtual IPv6 Workshop, June 2020, <https://www.cmand.org/workshops/202006-v6/slides/2020-06-16-xtn-hdrs.pdf>. EXTERNAL
- Microsoft, "Windows TCP/IP Remote Code Execution Vulnerability", CVE-2021-24094, February 2021, <https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24094>. EXTERNAL
- Petersen, B. and J. Scudder, "Modern Router Architecture for Protocol Designers", IEPG 94, November 2015, <http://www.iepg.org/2015-11-01-ietf94/IEPG-RouterArchitecture-jgs.pdf>. EXTERNAL
- Lyon, G., "Firewall/IDS Evasion and Spoofing", Chapter 15. Nmap Reference Guide, <https://nmap.org/book/man-bypass-firewalls-ids.html>. EXTERNAL
- Atlasis, A., "Attacking IPv6 Implementation Using Fragmentation", Black Hat Europe 2012, March 2012, <https://void.gr/kargig/ipv6/bh-eu-12-Atlasis-Attacking_IPv6-Slides.pdf>. EXTERNAL
- Atlasis, A., Rey, E., and R. Schaefer, "Evasion of High-End IDPS Devices at the IPv6 Era", Black Hat Europe 2014, 2014, <https://www.ernw.de/download/eu-14-Atlasis-Rey-Schaefer-briefings-Evasion-of-HighEnd-IPS-Devices-wp.pdf>. EXTERNAL
- Huston, G., "Dealing with IPv6 fragmentation in the DNS", APNIC Blog, August 2017, <https://blog.apnic.net/2017/08/22/dealing-ipv6-fragmentation-dns/>. EXTERNAL
- Bonica, R., "IPv6 Fragmentation: The Case For Deprecation", NANOG 58, June 2013, <https://www.nanog.org/sites/default/files/mon.general.fragmentation.bonica.pdf>. EXTERNAL
- IETF RFC 2460 [Superseded*]
- IETF RFC 5635 [Active*]
- IETF RFC 6192 [Active*]
- IETF RFC 6437 [Active*]
- IETF RFC 6438 [Active*]
- IETF RFC 7045 [Active*]
- RFC7098 — RFC7098 EXTERNAL
- IETF RFC 7113 [Active*]
- IETF RFC 7739 [Active*]
- IETF RFC 7872 [Active*]
- IETF RFC 8900 [Active*]
- IETF RFC 8955 [Active*]
- IETF RFC 8956 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9098.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9098, Operational Implications of IPv6 Packets with Extension Headers. Available at https://doi.org/10.17487/RFC9098
Snippet:
IETF RFC 9098, Operational Implications of IPv6 Packets with Extension Headers. Available at https://doi.org/10.17487/RFC9098
HTML (ISO 690 compliant)
Preview:
IETF RFC 9098, Operational Implications of IPv6 Packets with Extension Headers. Available at https://doi.org/10.17487/RFC9098
Snippet:
<span class="citation"><cite>IETF RFC 9098</cite>, Operational Implications of IPv6 Packets with Extension Headers. Available at <a href="https://doi.org/10.17487/RFC9098" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9098</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9098, Operational Implications of IPv6 Packets with Extension Headers
doi: 10.17487/RFC9098
url: https://doi.org/10.17487/RFC9098
doi: 10.17487/RFC9098
url: https://doi.org/10.17487/RFC9098
Snippet:
<li> <cite id="bib-rfc9098">IETF RFC 9098</cite>, Operational Implications of IPv6 Packets with Extension Headers <span class="doi">10.17487/RFC9098</span> </li>
Referenced By
- IETF RFC 9288 [Active*]
- IETF RFC 9386 [Active*]
- IETF RFC 9673 [Active*]