[afnog] IPv 6 Point to Point at /64?

[Mark Tinka]

On Thursday, June 07, 2012 09:42:11 AM Randy Bush wrote:

> my point was that it impacts both

I'd agree on the admin side of things, but not so much in 
the router space, as that's a hardware entry.

Even on the software routers, particularly Cisco, Null 
routes are processed in the CEF path, which is quicker than 
the flow path.

After all, the router would process those packets anyway, if 
an attacker chose to scan that subnet and it wasn't null-
routed to begin with.

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://afnog.org/pipermail/afnog/attachments/20120607/f82596e7/attachment.sig>