aboutsummaryrefslogtreecommitdiffstats
path: root/roles/users/tasks/semi.yml
diff options
context:
space:
mode:
authorAsbjørn Sloth Tønnesen <asbjorn@labitat.dk>2021-06-18 21:03:50 +0000
committerAsbjørn Sloth Tønnesen <asbjorn@labitat.dk>2021-06-18 22:00:32 +0000
commitb90e3611976192db56394b57c9527db7a58af62c (patch)
tree320ae46748077c88f777d6db8f03e31268293e63 /roles/users/tasks/semi.yml
parent1a0e6180c199225b1790d74614a4c727cfec1f7d (diff)
downloadlabitat-ansible-b90e3611976192db56394b57c9527db7a58af62c.tar.gz
labitat-ansible-b90e3611976192db56394b57c9527db7a58af62c.tar.xz
labitat-ansible-b90e3611976192db56394b57c9527db7a58af62c.zip
space_server: bird: fiberby: enable TTL security
This protects us amount otherthings against 3rd parties resetting the TCP connection underneat our BGP sessions. This has been enabled in both ends, and this _MUST_ remain enabled, otherwise these sessions will go down. If this needs to be disabled for some reason then it must be coordinated with Fiberby. RFC 5082 - The Generalized TTL Security Mechanism https://datatracker.ietf.org/doc/html/rfc5082
Diffstat (limited to 'roles/users/tasks/semi.yml')
0 files changed, 0 insertions, 0 deletions