🚀 go-pugleaf

"Randy S." <rswitt@ufl.edu> writes:
> Damn, John, you put that really well!   Yes, from what I understand, when you
> scale up DHCP REALLY large you run into problems.  ARP broadcasts can become a
> significant portion of your bandwidth, and one rogue ARP storm can take everybody
> down.

Stop bridging among customer links and the problem goes away.  What
you're describing is a network design and implementation problem, not
a protocol problem or even a distinction between PPPoE and DHCP.

>  We had several instances of poorly designed 3rd party routers repeatedly
> sending out DHCP requests causing all sorts of havoc.  The installation of secure
> ARP helped fix much of this, but apparently DHCP doesn't work nearly as well on a
> HUGE flat LAN structure (which is what DSL looks like I believe), as it does on a
> more moderately sized one.

If you're using PPPoE on a bridged LAN, you're in deep trouble.  PPPoE
has no security it all -- read RFC 2516.  It's trivial to spoof
messages.

-- 
James Carlson, Internet Engineering       <james.d.carlson@east.sun.com>
SUN Microsystems / 1 Network Drive         71.234W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.497N   Fax +1 781 442 1677
Second Edition now available - http://people.ne.mediaone.net/carlson/ppp