The IPv6 VPN Service Destination Option
RFC 9837, “The IPv6 VPN Service Destination Option”, is an Experimental document published in August 2025 by R. Bonica, X. Li, A. Farrel, Y. Kamite, L. Jalil. The canonical text is published by the RFC Editor.
Abstract
This document describes an experiment in which VPN service information is encoded in an experimental IPv6 Destination Option. The experimental IPv6 Destination Option is called the VPN Service Option.
One purpose of this experiment is to demonstrate that the VPN Service Option can be deployed in a production network. Another purpose is to demonstrate that the security measures described in this document are sufficient to protect a VPN. Finally, this document encourages replication of the experiment.
What “Experimental” means
Describes a specification that is part of a research or development effort, published so the community can gain experience with it.
The canonical text of RFC 9837 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9836 A YANG Data Model for Augmenting VPN Service and Network Models with Attachment Circuits
- RFC 9838 Group Key Management Using the Internet Key Exchange Protocol Version 2
- RFC 9835 A Network YANG Data Model for Attachment Circuits
- RFC 9839 Unicode Character Repertoire Subsets
- RFC 9834 YANG Data Models for Bearers and Attachment Circuits as a Service
- RFC 9840 rLEDBAT: Receiver-Driven Low Extra Delay Background Transport for TCP
- RFC 9833 A Common YANG Data Model for Attachment Circuits
- RFC 9841 Shared Brotli Compressed Data Format