Hacker News new | ask | show | jobs
by drewg123 3009 days ago
What irked me about IPv6 was extension headers. At first they sound like a great idea. It is very flexible to chain headers. However, hardware engineers hate them, because the number of IPv6 extension headers is potentially unbounded, leading to all kinds of "interesting" corner cases in networking hardware. So they end up not being supported in hardware, which means the either don't work at all, or they kick into a slow firmware exception path. I would not be surprised if there is eventually a DOS attack against IPv6 enabled gear using extension headers.