Routed protocols are often susceptible to spoof attacks. The canonical solution for IPv6 is Secure Neighbor Discovery (SEND), a solution that is non-trivial to deploy. This document proposes a light-weight alternative and complement to SEND based on filtering in the layer-2 network fabric, using a variety of filtering criteria, including, for example, SEND status. Status of This MemoThis document is not an Internet Standards Track specification; it is published for informational purposes.This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Not all documents approved by the IESG are a candidate for any level of Internet Standard; see Section 2 of RFC 5741.Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc6105.

Abstract-Software-defined deployments are growing into data center and enterprise network infrastructures. The typical promises of software-defined networks (SDN) are improved time for market, decreased risk and operational costs for services, flexibility and unified management. However, little is known and shared about how to actually manage an SDN network, especially in localising underperforming network paths (what we call "troubleshooting"). We describe a novel approach to ease large network troubleshooting by leveraging SDN features and incorporating distributed monitoring of network traffic. We suggest SDN-RADAR, a tool that can help network administrators understand which is the most likely faulty network link. To the best of our knowledge this is the first troubleshooting solution that combines user-side performance measurements with network data extracted from the SDN controller.

This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited.

Dr. Ciprian Popoviciu has over 22 years of experience working in various technical and leadership roles in the IT industry. He founded and led Nephos6, the first company to enable OpenStack for IPv6 and deployit in production. Prior to starting Nephos6 he managed the architecture team of Cisco's Engineering Infrastructure Services organization where he defined the strategy and led the execution of the internal DC consolidation and transition to cloud. For the past 17 years Ciprian worked on the strategy, architecture, implementation and validation of IPv6 adoption by large service providers and enterprises worldwide. Ciprian worked with various governments on defining national level and agency level IPv6 strategies and standards. He also worked with product and test teams on specific IPv6 features and roadmaps towards IPv6 readiness. Ciprian authored two IPv6 books: "Deploying IPv6 Networks" and "Global IPv6 Strategies". He co-authored 5 IPv6 related IETF RFCs and multiple IPv6 related patents. Ciprian is an IPv6 Forum Fellow, he is a frequent speaker at industry events and conferences and he is an active contributor to various technology and scientific publications. Dr. Popoviciu is currently a professor of Technology Systems at East Carolina University.

No abstract