RFC 6056: Recommendations for Transport-Protocol Port Randomization

During the last few years, awareness has been raised about a number of "blind" attacks that can be performed against the Transmission Control Protocol (TCP)…

Read RFC 6056 on the RFC Editor

Outgoing relationships (20 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 3550: RTP: A Transport Protocol for Real-Time Applications
Normative reference — RFC 793: Transmission Control Protocol
Normative reference — RFC 4301: Security Architecture for the Internet Protocol
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 768: User Datagram Protocol
Normative reference — RFC 1321: The MD5 Message-Digest Algorithm
Normative reference — RFC 4960: Stream Control Transmission Protocol
Normative reference — RFC 4340: Datagram Congestion Control Protocol (DCCP)
Normative reference — RFC 4787: Network Address Translation (NAT) Behavioral Requirements for Unicast UDP
Normative reference — RFC 2385: Protection of BGP Sessions via the TCP MD5 Signature Option
Normative reference — RFC 5382: NAT Behavioral Requirements for TCP
Normative reference — RFC 3605: Real Time Control Protocol (RTCP) attribute in Session Description Protocol (SDP)
Normative reference — RFC 3828: The Lightweight User Datagram Protocol (UDP-Lite)
Informative reference — RFC 5925: The TCP Authentication Option
Informative reference — RFC 2663: IP Network Address Translator (NAT) Terminology and Considerations
Informative reference — RFC 4953: Defending TCP Against Spoofing Attacks
Informative reference — RFC 1948: Defending Against Sequence Number Attacks
Informative reference — RFC 5927: ICMP Attacks against TCP
Informative reference — RFC 1337: TIME-WAIT Assassination Hazards in TCP

Incoming relationships (23 related RFCs)

Normatively referenced by — RFC 6887: Port Control Protocol (PCP)
Normatively referenced by — RFC 6888: Common Requirements for Carrier-Grade NATs (CGNs)
Normatively referenced by — RFC 6528: Defending against Sequence Number Attacks
Normatively referenced by — RFC 7414: A Roadmap for Transmission Control Protocol (TCP) Specification Documents
Normatively referenced by — RFC 6967: Analysis of Potential Solutions for Revealing a Host Identifier (HOST_ID) in Shared Address Deployments
Normatively referenced by — RFC 9109: Network Time Protocol Version 4: Port Randomization
Normatively referenced by — RFC 7857: Updates to Network Address Translation (NAT) Behavioral Requirements
Normatively referenced by — RFC 7430: Analysis of Residual Threats and Possible Fixes for Multipath TCP (MPTCP)
Normatively referenced by — RFC 7618: Dynamic Allocation of Shared IPv4 Addresses
Normatively referenced by — RFC 9414: Unfortunate History of Transient Numeric Identifiers
Normatively referenced by — RFC 9415: On the Generation of Transient Numeric Identifiers
Informatively referenced by — RFC 8085: UDP Usage Guidelines
Informatively referenced by — RFC 6269: Issues with IP Address Sharing
Informatively referenced by — RFC 6169: Security Concerns with IP Tunneling
Informatively referenced by — RFC 7597: Mapping of Address and Port with Encapsulation (MAP-E)
Informatively referenced by — RFC 7599: Mapping of Address and Port using Translation (MAP-T)
Informatively referenced by — RFC 8086: GRE-in-UDP Encapsulation
Informatively referenced by — RFC 9643: YANG Groupings for TCP Clients and TCP Servers
Informatively referenced by — RFC 8656: Traversal Using Relays around NAT (TURN): Relay Extensions to Session Traversal Utilities for NAT (STUN)
Informatively referenced by — RFC 6013: TCP Cookie Transactions (TCPCT)
Informatively referenced by — RFC 6978: A TCP Authentication Option Extension for NAT Traversal
Informatively referenced by — RFC 7269: NAT64 Deployment Options and Experience
Informatively referenced by — RFC 9416: Security Considerations for Transient Numeric Identifiers Employed in Network Protocols