Hacker News new | past | comments | ask | show | jobs | submit login

> To give ipv6 some credit, there are some very useful things like flow labels.

They are not useful, as you can't depend on them.




Wasn't aware of this actually, whats the issue with them?


If you're using solely the flow labels to do load balancing, malicious clients can force traffic to come through only one load balancer by setting the same flow label.

You need to add the source IP/port into the mix. But they alone are in practice enough for decent load balancing.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: