Post #2358496
2026-05-01 19:51 UTC
Replies (3)
-
@damien@layer8.space 2026-05-01 19:57
@nygren@hachyderm.io yeah, but it's nice to think that some DDoS folk might be hammering 127.0.0.1 as hard as they can?
-
@kasperd@westergaard.social 2026-05-01 20:13
Maybe take it a step further and define IP addresses for this purpose which networks can route locally if they have some alternative way of reaching the site in question. This alternative way may not work in all cases, but I think it would be good to have in case anyone can make it useful. The default behavior for those IP addresses would be a no route to network response, which is still better than pointing to localhost. I don’t think the discard prefix is intended for this purpose, at least not from my reading of the specification. And when I looked into the discard prefix in the past I don’t think the behavior was consistent. From some networks the packets would be silently dropped but from other networks you’d get an ICMPv6 error back.
-
@jtk@infosec.exchange 2026-05-02 12:22
@nygren@hachyderm.io Wouldn't an nxdomain do that? But I'm not sure I would want to make any change like that. Surprised to see them pointing to a loopback, that is very unusual and seems like the wrong approach to me.