Design guidelines for robust Internet protocols

摘要: Robustness has long been a central design goal of the Internet. Much initial effort towards robustness focusedon "fail-stop" model, where node failures are complete and easily detectable by other nodes. The Internet is quite robust against such failures, routinely surviving various catastrophes with only limited outages. This largely due to widespread belief in set guidelines for critical decisions as initiate recovery how maintain state.However, remains extremely vulnerable more arbitrary where, through either error or malice, issues syntactically correct responses that not semantically correct. Such some simple misconfigured routing state, can seriously undemnine functioning With playing role global telecommunications infrastructure, this level vulnerability no longer acceptable.In paper we argue make these kinds need change way network protocols. To end, propose six improving protocol design. These emerged from study past examples determining what could have done prevent problem occurring first place. unifying theme behind protocols defensively, expecting malicious attack, misimplementation, misconfiguration at every turn.