[117795] in North American Network Operators' Group
Re: Minimum IPv6 size
daemon@ATHENA.MIT.EDU (Leo Bicknell)
Sat Oct 3 15:36:15 2009
Date: Sat, 3 Oct 2009 12:35:03 -0700
From: Leo Bicknell <bicknell@ufp.org>
To: nanog <nanog@nanog.org>
Mail-Followup-To: nanog <nanog@nanog.org>
In-Reply-To: <FC7DF09A-2E2D-4C62-B3DE-AFFE2B81A6B7@icann.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--+QahgC5+KEYLbs62
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
In a message written on Sat, Oct 03, 2009 at 03:01:42AM -0700, Leo Vegoda w=
rote:
> Why the whole /16 rather than just that /29 and a few other blocks set =
=20
> aside for /48s? There are a lot of /48s in a /16, so protecting =20
> against someone accidentally deaggregating their allocated /32 into /=20
> 48s seems legitimate.
Our track record of keeping up with these lists as in industry in
IPv4 is pretty poor, I see no reason to think IPv6 is any better.
The more restrictive, the greater the chance of inadvertently filtering
something you should not.
The problem of a peer deaggregating too many routes to you is better
handled with max-prefix settings. We've had this technology for a long
time, and if you're really concerned about getting an extra 10k routes
from a peer use max-prefix, not some draconian, static, never updated
prefix filter.
--=20
Leo Bicknell - bicknell@ufp.org - CCIE 3440
PGP keys at http://www.ufp.org/~bicknell/
--+QahgC5+KEYLbs62
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)
iQIVAwUBSsenZ7N3O8aJIdTMAQLUiA//Y7m71ifdULjkB8i6TAb0bMS0J6B/JJBs
G+5KkZYmpElupBQqiXpggoWMXgQBchAIuN6Wf2e3PACYu8vFBWnEL+kQKzF4jz0A
kBgNjpE2hjvyTlnX+SZaApBuEmJf5K0+W1jDKAWJIRHJ8/0gNH1qADzxyL4UUlgo
pJ6hrSU5ZHQ7EuCRmcLAsaOm8eKABNZdWkhG0A5IyoT+JNdIe9iTyv4jE0FgRi4a
eG91FFaV7JiAdlKiR0ZN7AVBtmW4u9dtpuztRaHWWlibFgY7eO5vzPmeBiiZPvVO
FMCK+yF8EivZlAa3MELPe44EoHMd1KDVDm7P/mOXgBuBR+/Aqhh2eveEtMb2/adb
w0VLyVqWcKZ7UrZYqEc/EHLBvHQHV3veeg7PQ1Pjq9W64YhwcBfwRJfdlYoSfEEv
KghbCtpSQJsLFxQAJPNddGve9AwuPp25OY+myDZLfxwnJbmouV5MV9WTHf05tFBY
qXASoXQ4alHsSAJV8X4Q65+OiCbn31OTl8F2lmOwvi1uvLJZX0Dd7Q+aDrGzZq8X
8LVyrjTT8LCrUXk28MLQMq1MmEc9g+iLkWvb8dt9Gj4ivSoH2vxIE+4Q45gP8JNQ
2Y9Dmi9bV66YWBPWtEIEwpE5mELXwpDwFir1Rq3jC5mZDKIdTD/vTwpEuDUqWNKJ
nCmkg670qEE=
=ZCLH
-----END PGP SIGNATURE-----
--+QahgC5+KEYLbs62--