Last Call Review of draft-ietf-bier-bfd-03
review-ietf-bier-bfd-03-secdir-lc-meadows-2023-05-08-00
| Request | Review of | draft-ietf-bier-bfd |
|---|---|---|
| Requested revision | No specific revision (document currently at 05) | |
| Type | Last Call Review | |
| Team | Security Area Directorate (secdir) | |
| Deadline | 2023-04-28 | |
| Requested | 2023-04-07 | |
| Requested by | Tony Przygienda | |
| Authors | Quan Xiong , Greg Mirsky , fangwei hu , Chang Liu | |
| I-D last updated | 2023-05-08 | |
| Completed reviews |
Secdir Last Call review of -03
by Catherine Meadows
(diff)
Rtgdir Last Call review of -03 by Russ White (diff) |
|
| Assignment | Reviewer | Catherine Meadows |
| State | Completed | |
| Request | Last Call review on draft-ietf-bier-bfd by Security Area Directorate Assigned | |
| Posted at | https://mailarchive.ietf.org/arch/msg/secdir/ovSYjXKUNDWd1xwrzHJo3MjKACM | |
| Reviewed revision | 03 (document currently at 05) | |
| Result | Ready | |
| Completed | 2023-05-08 |
review-ietf-bier-bfd-03-secdir-lc-meadows-2023-05-08-00
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. The summary of the review is Ready. RFC8562 and RFC8563 define methods using Bidirectional Forwarding Detection (BFD) for monitoring and detecting unicast failure between senders (heads) and receivers (tails) in multipoint or multicast networks. This document describes procedures for applying these methods in the Bit Index Explicit Replication (BIER) [RFC8279] domain. Most of it is concerned with the format and use of packet headers. In the Security Consideration section, the reader is directed to I-D.ietf-bier-ping for BIER packet processing security considerations, and RFC8562 for general multipoint BFD security considerations. I agree with the authors’ assertion that this document does not produce any additional security considerations.