[161540] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [c-nsp] DNS amplification

daemon@ATHENA.MIT.EDU (Jared Mauch)
Tue Mar 19 14:41:33 2013

From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <F4B1CD3B-AA39-44F2-9663-F9E0B442F534@ianai.net>
Date: Tue, 19 Mar 2013 14:32:36 -0400
To: "Patrick W. Gilmore" <patrick@ianai.net>
Cc: North American Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org


On Mar 19, 2013, at 2:15 PM, "Patrick W. Gilmore" <patrick@ianai.net> =
wrote:

> Has anyone implemented (properly) FIB compression?

Since you say FIB, yes.  If all RIB prefixes and their sub-prefixes go =
the same next-hop, then you don't need to install additional entries in =
the FIB.  Some platforms only can install ~8k/second.  Reducing =
duplicate entries is always helpful.

One can't do RIB compression due to the nature of the protocol.

- Jared=


home help back first fref pref prev next nref lref last post