Turning IPv6 tunnels into programmable delay lines for pulsing DoS
Summary
This article explains TED, a pulsing Denial-of-Service technique that exploits IPv6 tunnel and Extension Header processing to create programmable traffic bursts. It covers measurement results across billions of addresses, and provides practical mitigations to reduce tunnel exposure and improve decapsulation visibility for operators.