Note: This ballot was opened for revision 11 and is now closed.

(Alia Atlas) Yes

Alvaro Retana Yes

(Jari Arkko) No Objection

Deborah Brungard No Objection

(Ben Campbell) No Objection

(Benoît Claise) No Objection

Alissa Cooper No Objection

(Stephen Farrell) No Objection

I would have liked to know a bit more about how these schemes
behave if some of the servers or say a ToR device in the DC are
considered as attackers e.g. having been compromised, but you
only mention attacks from outside the DC. I assume the answer is
to not accept servers as BGP speakers, but I'm not sure how you
do that reliably. And I also don't know whether or not ToR
devices are successfully attacked often.

(Joel Jaeggli) No Objection

Lionel Morand performed the opsdir review

(Suresh Krishnan) No Objection

(Mirja Kühlewind) No Objection

(Terry Manderson) No Objection

(Kathleen Moriarty) No Objection

Thanks for addressing the SecDir review:
https://www.ietf.org/mail-archive/web/secdir/current/msg06610.html