<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
We've used DHCP relay/helper across WAN connections for over a
decade without issue. Sometimes it doesn't make sense to have a DHCP
(or DNS or RADIUS) server on-site.<br>
<br>
As others have stated, unicast DHCP is no different than any other
unicast packet.<br>
<br>
--Blake<br>
<div class="moz-signature"><br>
</div>
<div class="moz-cite-prefix">On 6/8/2022 10:52 AM, Jay Ashworth
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:9EC2EBA6-B38B-4DD8-9119-4EA9CA033A26@baylink.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
Grant is saying most of the stuff that was going through my head,
here, I was just busy eating lunch at the time so I did not show
my work. ;-)<br>
<br>
<div class="gmail_quote">On June 8, 2022 11:49:43 AM EDT, Grant
Taylor <a class="moz-txt-link-rfc2396E" href="mailto:gtaylor@tnetconsulting.net"><gtaylor@tnetconsulting.net></a> wrote:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
0.8ex; border-left: 1px solid rgb(204, 204, 204);
padding-left: 1ex;">
<pre dir="auto" class="k9mail">On 6/8/22 9:30 AM, Simon Lockhart via Outages wrote:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;">Centralised DHCP server in conjunction with DHCP relay at remote sites.
</blockquote>
Thank you for clarifying local broadcast vs remote relay Simon L. (1st message) and Chris W. (terms).
I too had been wondering the same thing that Jay A. was asking about. Now I see a possible / viable reason.
However, I do wonder why such DHCP relay traffic would be in the clear and not inside of a VPN (encrypted or otherwise).
<blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;">If I were buying an Internet service, I wouldn't expect my service provider
to arbitarily block some ports (unless it's to protect against an ongoing
network attack, and it was communicated to customers).
</blockquote>
I too expect that ISPs to be agnostic / common carrier / bit movers. The only thing that I'm willing to accept is filtering specific traffic in accordance with industry best practice in the spirit of being -- what I've long hear referred to as -- a Good (Inter)Net Neighbor. E.g. filtering traffic that's actively abused and / or related to (D)DOS attacks. I also expect that such filtering to be well documented and to have ways for legitimate use cases to be exempted therefrom.
P.S. I'm replying to Outages-Discussion as my comments don't directly contribute to Outages proper.
<div class="k9mail-signature">--
Grant. . . .
unix || die
</div></pre>
</blockquote>
</div>
</blockquote>
<br>
</body>
</html>