@misc{rfc8019, series = {Request for Comments}, number = 8019, howpublished = {RFC 8019}, publisher = {RFC Editor}, doi = {10.17487/RFC8019}, url = {https://www.rfc-editor.org/info/rfc8019}, author = {Yoav Nir and Valery Smyslov}, title = {{Protecting Internet Key Exchange Protocol Version 2 (IKEv2) Implementations from Distributed Denial-of-Service Attacks}}, pagetotal = 32, year = 2016, month = nov, abstract = {This document recommends implementation and configuration best practices for Internet Key Exchange Protocol version 2 (IKEv2) Responders, to allow them to resist Denial-of-Service and Distributed Denial-of-Service attacks. Additionally, the document introduces a new mechanism called "Client Puzzles" that helps accomplish this task.}, }