%% You should probably cite rfc8019 instead of this I-D. @techreport{ietf-ipsecme-ddos-protection-01, number = {draft-ietf-ipsecme-ddos-protection-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-ipsecme-ddos-protection/01/}, author = {Yoav Nir and Valery Smyslov}, title = {{Protecting Internet Key Exchange (IKE) Implementations from Distributed Denial of Service Attacks}}, pagetotal = 25, year = 2015, month = mar, day = 9, abstract = {This document recommends implementation and configuration best practices for Internet-connected IPsec Responders, to allow them to resist Denial of Service and Distributed Denial of Service attacks. Additionally, the document introduces a new mechanism called "Client Puzzles" that help accomplish this task.}, }