RFC 6169: Security Concerns with IP Tunneling

A number of security concerns with IP tunnels are documented in this memo. The intended audience of this document includes network administrators and future…

Read RFC 6169 on the RFC Editor

Outgoing relationships (14 related RFCs)

Informative reference — RFC 5389: Session Traversal Utilities for NAT (STUN)
Informative reference — RFC 3971: SEcure Neighbor Discovery (SEND)
Informative reference — RFC 4787: Network Address Translation (NAT) Behavioral Requirements for Unicast UDP
Informative reference — RFC 3056: Connection of IPv6 Domains via IPv4 Clouds
Informative reference — RFC 4380: Teredo: Tunneling IPv6 over UDP through Network Address Translations (NATs)
Informative reference — RFC 3484: Default Address Selection for Internet Protocol version 6 (IPv6)
Informative reference — RFC 3931: Layer Two Tunneling Protocol - Version 3 (L2TPv3)
Informative reference — RFC 2661: Layer Two Tunneling Protocol "L2TP"
Informative reference — RFC 6056: Recommendations for Transport-Protocol Port Randomization
Informative reference — RFC 5214: Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)
Informative reference — RFC 5095: Deprecation of Type 0 Routing Headers in IPv6
Informative reference — RFC 2529: Transmission of IPv6 over IPv4 Domains without Explicit Tunnels
Informative reference — RFC 2979: Behavior of and Requirements for Internet Firewalls
Informative reference — RFC 5991: Teredo Security Updates

Incoming relationships (16 related RFCs)

Normatively referenced by — RFC 9837: The IPv6 VPN Service Destination Option
Informatively referenced by — RFC 6343: Advisory Guidelines for 6to4 Deployment
Informatively referenced by — RFC 7676: IPv6 Support for Generic Routing Encapsulation (GRE)
Informatively referenced by — RFC 9099: Operational Security Considerations for IPv6 Networks
Informatively referenced by — RFC 9298: Proxying UDP in HTTP
Informatively referenced by — RFC 6180: Guidelines for Using IPv6 Transition Mechanisms during IPv6 Deployment
Informatively referenced by — RFC 6732: 6to4 Provider Managed Tunnels
Informatively referenced by — RFC 9602: Segment Routing over IPv6 (SRv6) Segment Identifiers in the IPv6 Addressing Architecture
Informatively referenced by — RFC 6127: IPv4 Run-Out and IPv4-IPv6 Co-Existence Scenarios
Informatively referenced by — RFC 6981: A Framework for IP and MPLS Fast Reroute Using Not-Via Addresses
Informatively referenced by — RFC 9484: Proxying IP in HTTP
Informatively referenced by — RFC 6964: Operational Guidance for IPv6 Deployment in IPv4 Sites Using the Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)
Informatively referenced by — RFC 7059: A Comparison of IPv6-over-IPv4 Tunnel Mechanisms
Informatively referenced by — RFC 7123: Security Implications of IPv6 on IPv4 Networks
Informatively referenced by — RFC 7526: Deprecating the Anycast Prefix for 6to4 Relay Routers
Informatively referenced by — RFC 6782: Wireline Incremental IPv6