RFC 2385: Protection of BGP Sessions via the TCP MD5 Signature Option

This memo describes a TCP extension to enhance security for BGP. [STANDARDS-TRACK]

Read RFC 2385 on the RFC Editor

Incoming relationships (37 related RFCs)

Updated by, Informatively referenced by — RFC 6691: TCP Options and Maximum Segment Size (MSS)
Obsoleted by, Normatively referenced by — RFC 5925: The TCP Authentication Option
Normatively referenced by — RFC 4732: Internet Denial-of-Service Considerations
Normatively referenced by — RFC 4272: BGP Security Vulnerabilities Analysis
Normatively referenced by — RFC 4761: Virtual Private LAN Service (VPLS) Using BGP for Auto-Discovery and Signaling
Normatively referenced by — RFC 6056: Recommendations for Transport-Protocol Port Randomization
Normatively referenced by — RFC 3618: Multicast Source Discovery Protocol (MSDP)
Normatively referenced by — RFC 4724: Graceful Restart Mechanism for BGP
Normatively referenced by — RFC 6810: The Resource Public Key Infrastructure (RPKI) to Router Protocol
Normatively referenced by — RFC 3871: Operational Security Requirements for Large Internet Service Provider (ISP) IP Network Infrastructure
Normatively referenced by — RFC 8210: The Resource Public Key Infrastructure (RPKI) to Router Protocol, Version 1
Normatively referenced by — RFC 3682: The Generalized TTL Security Mechanism (GTSM)
Normatively referenced by — RFC 4781: Graceful Restart Mechanism for BGP with MPLS
Normatively referenced by — RFC 3913: Border Gateway Multicast Protocol (BGMP): Protocol Specification
Normatively referenced by — RFC 9648: YANG Data Model for TCP
Normatively referenced by — RFC 4277: Experience with the BGP-4 Protocol
Informatively referenced by — RFC 3945: Generalized Multi-Protocol Label Switching (GMPLS) Architecture
Informatively referenced by — RFC 6952: Analysis of BGP, LDP, PCEP, and MSDP Issues According to the Keying and Authentication for Routing Protocols (KARP) Design Guide
Informatively referenced by — RFC 4456: BGP Route Reflection: An Alternative to Full Mesh Internal BGP (IBGP)
Informatively referenced by — RFC 5065: Autonomous System Confederations for BGP
Informatively referenced by — RFC 5961: Improving TCP's Robustness to Blind In-Window Attacks
Informatively referenced by — RFC 5565: Softwire Mesh Framework
Informatively referenced by — RFC 7454: BGP Operations and Security
Informatively referenced by — RFC 4614: A Roadmap for Transmission Control Protocol (TCP) Specification Documents
Informatively referenced by — RFC 5482: TCP User Timeout Option
Informatively referenced by — RFC 3013: Recommended Internet Service Provider Security Services and Procedures
Informatively referenced by — RFC 4381: Analysis of the Security of BGP/MPLS IP Virtual Private Networks (VPNs)
Informatively referenced by — RFC 5566: BGP IPsec Tunnel Encapsulation Attribute
Informatively referenced by — RFC 6013: TCP Cookie Transactions (TCPCT)
Informatively referenced by — RFC 8922: A Survey of the Interaction between Security Protocols and Transport Services
Informatively referenced by — RFC 3037: LDP Applicability
Informatively referenced by — RFC 2791: Scalable Routing Design Principles
Informatively referenced by — RFC 3869: IAB Concerns and Recommendations Regarding Internet Research and Evolution
Informatively referenced by — RFC 4031: Service Requirements for Layer 3 Provider Provisioned Virtual Private Networks (PPVPNs)
Informatively referenced by — RFC 5123: Considerations in Validating the Path in BGP
Informatively referenced by — RFC 9353: IGP Extension for Path Computation Element Communication Protocol (PCEP) Security Capability Support in PCE Discovery (PCED)
Informatively referenced by — RFC 7211: Operations Model for Router Keying