@@ -995,9 +995,17 @@ Guidance: The product should range-check untrusted input fields that trigger mem
* Verdict: For each set of inputs, the product functions and the platform functions remain acceptably available => PASS, otherwise FAIL
* Evidence: Set of inputs, logs of measurements, explanation of availability metrics
#### 5.2.19.6 MI-FAIR: Fair resource usage and prioritization
#### 5.2.19.6 MI-FAIR: Fair resource usage
> TODO: Write mitigation requiring the interface implement some form of ensuring fair resource usage by multiple sources of input, including the ability to prioritize some sources of input
The product and supporting remote data processing services shall implement mechanisms to fairly allocate VPN system resources among multiple users.
* Applicability: VPN products with multiple users sharing infrastructure
* Reference: TR-AVAI
* Objective: Maintain service availability during denial of service attacks
* Preparation: Prepare several different sources of VPN traffic with varying amounts of resource usage
* Activities: While multiple sources of VPN traffic are using the VPN connection, measure the bandwidth and latency on each source of traffic
* Verdict: Each source of traffic makes steady progress without unreasonable stalls => PASS, otherwise FAIL
* Evidence: Specification of traffic sources, measurements of bandwidth and latency, analysis of bandwidth and latency
#### 5.2.19.7 MI-DOST: Document risk transfer to operational environment for denial of service
