Re: Re: Re: [Ext] my finance department cares deeply about 2%

[Samaneh Tajalizadehkhoob via NANOG <nanog () lists nanog org>]

I am not checking my emails until Nov 14th, 2025. Thanks, Samaneh

On Nov 10, 2025, at 1:06 PM, Samaneh Tajalizadehkhoob via NANOG <nanog () lists nanog org> wrote:

I am not checking my emails until Nov 14th, 2025. Thanks, Samaneh

On Nov 7, 2025, at 5:53 PM, Saku Ytti via NANOG <nanog () lists nanog org> wrote:

On Fri, 7 Nov 2025 at 16:10, Marco Moock via NANOG
<nanog () lists nanog org> wrote:

UDP and TCP have checksums.
Other applications have signature mechanisms to verify the data, e.g.
gpg, certificates etc.
IPsec exists which also provides such mechanisms if needed.

Transit doesn't verify UDP/TCP checksum. So with IPv6 you have no way
of knowing when bad memory is mangling your packets, which very likely
is happening right now on some people on this very mailing list, which
they could diagnose by looking at IP checksums failing for packets
coming in from LSR or L2 transit to the L3 edge.

Even digging up UDP/TCP from IPv6 can be very tricky, it is easy to
exhaust ex Nokia FP resources and stall the CPU by stacking headers,
in Juniper this doesn't happen, because Trio will eventually just
discard packets with too many stacked headers. Which is problematic,
as end host has no problem dealing with large stack of headers, so
this can be made to evade some type of ACL, such as permy any host
SMTP1 smtp, deny any any smtp. To stop residential from sending email
outside approved email GW.

--
++ytti
_______________________________________________
NANOG mailing list
https://urldefense.com/v3/__https://lists.nanog.org/archives/list/nanog () lists nanog 
org/message/ABH6D42AP2PPHJ6TNW2UCPIIA5EXIR4Y/__;!!PtGJab4!_i51BycmUzay-CYKXBKwCeJ3M7QTTeNYYilelZpfd79d0gEXu2xjtCSK2S2nD6y796ypWUqL9LoYygeTmwpadmNwJ5w$
 [lists[.]nanog[.]org]
_______________________________________________
NANOG mailing list
https://urldefense.com/v3/__https://lists.nanog.org/archives/list/nanog () lists nanog 
org/message/ICUZU42GGEFDGS6AO5CKVSTZ5OZ7EHYW/__;!!PtGJab4!6VN_pNoqcpFPXJNp7DffFSeGyqo5peWNM1PcZgJSzp6sSyGCruhyoxCE3XKdjBMpiDKp4DuufNpv2QYbiSnlJA-syBY$
 [lists[.]nanog[.]org]
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/AKPYQQAPWXV7GZUMLRJ2ITHOINLBZJ5J/