RFC 9097 §10: Security Considerations
The 7 Requirements of RFC 9097 §10, each quoted from the RFC with its state and the tests that prove it. Conformance explains the states.
| State | Requirements |
|---|---|
| Tested | 6 |
| Operational | 1 |
RFC9097-10-1
Operational
Cooperating Source and Destination hosts and agreements to test the path between the hosts are REQUIRED.
Note: Agreements between the parties that run the hosts.
RFC9097-10-2
Tested
It is REQUIRED to have a user client-initiated setup handshake between cooperating hosts that allows firewalls to control inbound unsolicited UDP traffic that goes to either a control port (expected and with authentication) or ephemeral ports that are only created as needed.
Note: Setup exchange on the Standard Port; Test Connections on Ephemeral Ports.
Proving tests:
crates/udpstp/tests/loopback.rs::test_connections_use_ports_from_the_configured_rangecrates/udpstp-core/tests/setup_exchange.rs::unauthenticated_setup_ends_in_ack_with_a_test_port_when_both_ends_opt_in
RFC9097-10-3
Tested
Client-server authentication and integrity protection for feedback messages conveying measurements are RECOMMENDED.
Note: Authentication Mode 2 (RFC 9946 section 5.3.2).
Proving tests:
crates/udpstp-core/tests/auth_mode_default.rs::a_server_without_mode_2_is_reported_and_the_client_does_not_fall_backcrates/udpstp-core/tests/mode2_status.rs::each_status_pdu_is_signed_with_its_sender_s_key
RFC9097-10-4
Tested
Hosts MUST limit the number of simultaneous tests to avoid resource exhaustion and inaccurate results.
Note: Admission.
Proving tests:
crates/udpstp-core/src/admission.rs::a_cap_full_of_activated_tests_still_refusescrates/udpstp-core/tests/unactivated_share.rs::a_new_setup_evicts_the_oldest_unactivated_test_connection
RFC9097-10-5
Tested
Senders MUST be rate limited.
Note: Sending Rate Table; Admitted Rate Cap.
Proving tests:
crates/udpstp-core/tests/algorithm_b.rs::rows_stay_within_the_table_and_fast_mode_stops_at_1_gbpscrates/udpstp-core/tests/algorithm_capped.rs::fast_mode_stops_at_the_row_matching_max_bandwidth
RFC9097-10-L1
Tested
The recommended load control search algorithm results in “ramp-up” from the lowest rate in the table.
Note: A Search Test starts at row 0 unless srIndexConf asks otherwise.
Proving tests:
crates/udpstp-core/tests/algorithm_b.rs::in_fast_mode_each_clean_interval_adds_high_speed_delta_rowscrates/udpstp-core/tests/algorithm_b.rs::the_default_search_starts_at_row_0
RFC9097-10-6
Tested
Testing with the Service Provider’s measurement hosts SHOULD be limited in frequency and/or overall volume of test traffic (for example, the range of duration values, I, SHOULD be limited).
Note: testIntTime’s maximum.
Proving tests: