http: //tools. ietf. org/html/bcp 38
WWW, Email, SSH, Telnet TCP, UDP IPv 4/IPv 6 Data Link Physical
E ON L SA DN S K EA W SN VIE E PR DN N Welcome to Dev. Ops Application Orchestration LIM ED ITIO N NF V Control Virtualization CLI
DNS Internet eople P GP B IP
DNS 1. 2. 3. 4. 5. 6. Thou shall not run RDNS and ADNS on the same machine! Thou shall not open the Recursive DNS to the wide world! Thou shall not use predictable Source Ports and Query IDs! Remember that a CPE or printer may also act as an open RDNS! Honour and support the IETF and RIPE work on DNS. Thou shall not use the same IP address to accept queries and to initiate recursive lookups on the Recursive DNS! 7. Thou shall not do lame delegations, nor endless CNAME-ing! 8. Thou shall use RRL (Response Rate Limit)! 9. Thou shall use TSIG for zone XFERs! 10. Thou shall not be afraid to deploy DNSSEC!
BGP 1. Thou shall not hijack IP prefixes from others! 2. Thou shall avoid exporting ANY IGP routes into BGP !!! 3. Thou shall not announce special/private IP prefixes via BGP! 4. Remember to register thy route policy in an IRR (e. g. RIPE DB). 5. Honour and support the IETF/RIPE work on the S-BGP, ps. BGP etc. 6. Thou shall not announce prefixes longer than /24 (v 4) or /48 (v 6)! 7. Thou shall not de-aggregate! 8. Thou shall use prefix-lists to control thy customers! 9. Thou shall use maximum-prefix to control thy peers! 10. Thou shall sign thy routes using RPKI ASAP!
What to do with … PEOPLE? “L’enfer, c’est les autres” (J. P. Sartre) http: //tools. ietf. org/html/bcp 38
Скачать презентацию http tools ietf org html bcp 38 WWW Email
7892cac522b69f04d4e32c2eed021571.ppt