Download presentation
Presentation is loading. Please wait.
Published byAgnes Terry Modified over 8 years ago
1
http://tools.ietf.org/html/bcp38
3
Physical Data Link IPv4/IPv6 TCP,UDP WWW, Email, SSH, Telnet
4
Virtualization Control Orchestration Application ON SALE SDN LIMITED EDITION NFV SNEAK PREVIEW NDN Welcome to DevOps CLI
5
IP Internet People DNS BGP
6
DNS 1.Thou shall not run RDNS and ADNS on the same machine! 2.Thou shall not open the Recursive DNS to the wide world! 3.Thou shall not use predictable Source Ports and Query IDs! 4.Remember that a CPE or printer may also act as an open RDNS! 5.Honour and support the IETF and RIPE work on DNS. 6.Thou shall not use the same IP address to accept queries and to initiate recursive lookups on the Recursive DNS! 7.Thou shall not do lame delegations, nor endless CNAME-ing! 8.Thou shall use RRL (Response Rate Limit)! 9.Thou shall use TSIG for zone XFERs! 10.Thou shall not be afraid to deploy DNSSEC!
7
BGP 1.Thou shall not hijack IP prefixes from others! 2.Thou shall avoid exporting ANY IGP routes into BGP !!! 3.Thou shall not announce special/private IP prefixes via BGP! 4.Remember to register thy route policy in an IRR (e.g. RIPE DB). 5.Honour and support the IETF/RIPE work on the S-BGP, psBGP etc. 6.Thou shall not announce prefixes longer than /24 (v4) or /48 (v6)! 7.Thou shall not de-aggregate! 8.Thou shall use prefix-lists to control thy customers! 9.Thou shall use maximum-prefix to control thy peers! 10.Thou shall sign thy routes using RPKI ASAP!
8
What to do with … PEOPLE? “L’enfer, c’est les autres” (J.P.Sartre) http://tools.ietf.org/html/bcp38
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.