Document toolboxDocument toolbox

RFC Compliance

The NIOS appliance is compliant with the following:

  • Qualys and Nessus security requirements

  • Joint Interoperability Test Command (JITC) certification for Internet Protocol version 6 capability

  • RFCs (Request for Comments)

The list of RFCs are:

NTP RFC Compliance

The NIOS appliance complies with the following NTP RFCs:

RFCs for NTP

RFC Number

RFC Title

RFC Number

RFC Title

8915

Network Time Security for the Network Time Protocol

8633

Network Time Protocol Best Current Practices

8573

Message Authentication Code for the Network Time Protocol

7822

Network Time Protocol Version 4: Protocol and Algorithms Specification

7821

UDP Checksum Complement in the Network Time Protocol (NTP)

7384

Security Requirements of Time Protocols in Packet Switched Networks

5908

Network Time Protocol (NTP) Server Option for DHCPv6

5907

Definitions of Managed Objects for Network Time Protocol Version 4 (NTPv4)

5906

Network Time Protocol Version 4: Autokey Specification

5905

Network Time Protocol Version 4: Protocol and Algorithms Specification

4330

Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI

4075

Simple Network Time Protocol (SNTP) Configuration Option for DHCPv6

3280

Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

3279

Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

3161

Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP)

2875

Diffie-Hellman Proof-of-Possession Algorithms

2783

Pulse-Per-Second API for UNIX-like Operating Systems, Version 1.0

2560

X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP

2510

Internet X.509 Public Key Infrastructure Certificate Management Protocols

2373

IP Version 6 Addressing Architecture

2030

Simple Network Time Protocol (SNTP) Version 4 for IPv4, IPv6 and OSI

1828

IP Authentication using Keyed MD5

1769

Simple Network Time Protocol (SNTP)

1589

A Kernel Model for Precision Timekeeping

1361

Simple Network Time Protocol (SNTP)

1321

The MD5 Message-Digest Algorithm

1305

Network Time Protocol (Version 3) Specification, Implementation and Analysis

1241

A Scheme for an Internet Encapsulation Protocol: Version 1

1165

Network Time Protocol (NTP) over the OSI Remote Operations Service

1129

Internet Time Synchronization: the Network Time Protocol

1128

Measured Performance of the Network Time Protocol in the Internet System

1119

Network Time Protocol (Version 2) Specification and Implementation

1059

Network Time Protocol (Version 1) Specification and Implementation

1004

A Distributed-Protocol Authentication Scheme

996

Statistics Server

985

Requirements for Internet Gateways

981

An Experimental Multiple-Path Routing Algorithm

975

Autonomous Confederations

958

Network Time Protocol (NTP)

957

Experiments in Network Clock Synchronization

956

Algorithms for Synchronizing Network Clocks

904

Exterior Gateway Protocol Formal Specification

891

DCN Local-Network Protocols

889

Internet Delay Experiments

799

Internet Name Domains

778

DCNET Internet Clock Service

IEN 173

Time Synchronization in DCNET Hosts

DNS RFC Compliance

The NIOS appliance complies with the following DNS RFCs:

RFCs for DNS

RFC Number

 RFC Title

RFC Number

 RFC Title

805

Computer Mail Meeting Notes

811

Hostnames Server

819

The Domain Naming Convention for Internet User Applications

881

The Domain Names Plan and Schedule

882

Domain Names: Concepts and Facilities

883

Domain Names: Implementation Specification

897

Domain Name System Implementation Schedule

920

Domain Requirements

921

Domain Name System Implementation Schedule – Revised

973

Domain System Changes and Observations

974

Mail Routing and the Domain System

1032

Domain Administrators Guide

1033

Domain Administrators Operations Guide

1034

Domain Names – Concepts and Facilities

1035

Domain Names – Implementation and Specification

1101

DNS Encoding of Network Names and Other Types

1122

Requirements for Internet Hosts – Communication Layers

1123

Requirements for Internet Hosts – Application and Support

1178

Choosing a Name for Your Computer

1348

DNS NSAP RRs

1386

The US Domain

1464

Using the Domain Name System to Store Arbitrary String Attributes

1535

A Security Problem and Proposed Correction with Widely Deployed DNS Software

1536

Common DNS Implementation Errors and Suggested Fixes

1537

Common DNS Data File Configuration Errors

1591

Domain Name System Structure and Delegation

1611

DNS Server MIB Extensions

1612

DNS Resolver MIB Extensions

1637

DNS NSAP Resource Records

1664

Using the Internet DNS to Distribute RFC

1327

Mail Address Mapping Tables

1713

Tools for DNS debugging

1794

DNS Support for Load Balancing

1811

U.S. Government Internet Domain Names

1816

U.S. Government Internet Domain Names

1912

Common DNS Operational and Configuration Errors

1956

Registration in the MIL Domain

1982

Serial Number Arithmetic

1995

Incremental Zone Transfer in DNS

1996

A Mechanism for Prompt Notification of Zone Changes

2010

Operational Criteria for Root Name Servers

2052

A DNS RR for specifying the location of services (DNS SRV)

2053

The AM (Armenia) Domain

2136

Dynamic Updates in the Domain Name System (DNS UPDATE)

2142

Mailbox Names for Common Services, Roles and Functions

2146

U.S. Government Internet Domain Names

2168

Resolution of Uniform Resource Identifiers using the Domain Name System

2181

Clarifications to the DNS Specification

2182

Selection and Operation of Secondary DNS Servers

2219

Use of DNS Aliases for Network Services

2240

A Legal Basis for Domain Name Allocation

2308

Negative Caching of DNS Queries (DNS NCACHE)

2317

Classless IN-ADDR.ARPA Delegation

2352

A Convention for Using Legal Names as Domain Names

2537

RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)

2606

Reserved Top Level DNS Names

2782

A DNS RR for Specifying the Location of Services (DNS SRV)

2845

Secret Key Transaction Authentication for DNS (TSIG)

2915

The Naming Authority Pointer (NAPTR) DNS Resource Record

2930

Secret Key Establishment for DNS (TKEY RR)

3596

DNS Extensions to Support IP Version 6

3645

Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)

3768

Virtual Router Redundancy Protocol (VRRP)

4033

DNS Security Introduction and Requirements

4034

Resource Records for the DNS Security Extensions

4035

Protocol Modifications for the DNS Security Extensions

4641

DNSSEC Operational Practices

4956

DNS Security (DNSSEC) Opt-In

4986

Requirements Related to DNS Security (DNSSEC) Trust Anchor Rollover

5155

DNSSEC Hashed Authenticated Denial of Existence

5702

Use of SHA-2 Algorithms with RSA in DNSKEY and RRSIG Resource Records for DNSSEC

5936

DNS Zone Transfer Protocol (AXFR)

6147

DNS Extensions for Network Address Translation from IPv6 Clients to IPv4 Servers

6698

The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol:

TLSA

6844

DNS Certification Authority Authorization (CAA) Resource Record

6891

Extension Mechanisms for DNS (EDNS0)

7646

Definition and Use of DNSSEC Negative Trust Anchors

7671

The DNS-Based Authentication of Named Entities (DANE) Protocol

7766

DNS Transport over TCP

7871

Client Subnet in DNS Queries

DHCP RFC Compliance

The appliance complies with the following DHCP RFCs:
RFCs for DHCP

RFC Number

RFC Title

RFC Number

RFC Title

1531

Dynamic Host Configuration Protocol 1534 Interoperation Between DHCP and BOOTP

1542

Clarifications and Extensions for the Bootstrap Protocol

2131

Dynamic Host Configuration Protocol

2132

DHCP Options and BOOTP Vendor Extensions

3046

DHCP Relay Agent Information Option

3315

Dynamic Host Configuration Protocol for IPv6 (DHCPv6)

3925

Vendor-Identifying Vendor Options for Dynamic Host Configuration Protocol version 4 (DHCPv4)

4388

Dynamic Host Configuration Protocol (DHCP) Leasequery

DHCPv6 RFC Compliance

The appliance complies with the following DHCPv6 RFCs:
RFCs for DHCPv6

RFC Number

RFC Title

RFC Number

RFC Title

4075

Simple Network Time Protocol (SNTP) Configuration Option for DHCPv6

3898

Network Information Service (NIS) Configuration Options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6)

3736

Stateless Dynamic Host Configuration Protocol (DHCP) Service for IPv6

3646

DNS Configuration options for Dynamic Host Configuration Protocol for IPv6 (DHCPv6)

3633

IPv6 Prefix Options for Dynamic Host Configuration Protocol (DHCP) version 6

3319

Dynamic Host Configuration Protocol (DHCPv6) Options for Session Initiation Protocol (SIP) Servers

IDN (Internationalized Domain Names) RFC Compliance

The appliance complies with the following IDN RFCs:
RFCs for IDN

RFC Number

RFC Title

RFC Number

RFC Title

3492

Punycode: A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)

5890

Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework

5891

Internationalized Domain Names for Applications (IDNA): Background, Explanation, and Rationale

5892

The Unicode code points and IDNA

5893

Right-to-left scripts for IDNA

5894

Internationalized Domain Names in Applications (IDNA): Protocol

5895

Mapping Characters in IDNA2008

6452

The Unicode Code Points and Internationalized Domain Names for Applications (IDNA) - Unicode 6.0

Generic RFC Compliance

The appliance complies with the following RFCs:

Generic RFCs

RFC Number

RFC Title

RFC Number

RFC Title

791

IPv4 Internet Protocol

2460

IPv6 Internet Protocol

5114

Additional Diffie-Hellman Groups for Use with IETF Standards

Â