[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

IP DSCP across the Internet



> We don't honor DSCP values that comes in via best-effort circuits
> (i.e., the Internet). Although not a very strong reason, this
> particular experience is one reason why.

trusting markings of any sort which you do not need is an increase in
attack, game playing, and/or bug surface.  the only thing i would pass
is ecn.

randy