bgpd - tcp md5 signatures


We implemented tcp md5 signatures as Security Association within the IPsec framework
bgpd got a pfkey interface to interact with the IPsec framework

not a new attack vector - of course, sequence numbers et al are checked earlier, and then, md5 is damn cheap

tcp md5sig is extremly easy to configure, works with ciscos and junipers, almost no overhead: USE IT!