[161946] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Tier 2 ingress filtering

daemon@ATHENA.MIT.EDU (Saku Ytti)
Thu Mar 28 19:34:20 2013

Date: Fri, 29 Mar 2013 01:34:03 +0200
From: Saku Ytti <saku@ytti.fi>
To: nanog@nanog.org
In-Reply-To: <16467978.8.1364500039086.JavaMail.root@benjamin.baylink.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

On (2013-03-28 15:47 -0400), Jay Ashworth wrote:

> > You can't do it at top-level nor it's not practical to hope that some
> > day BCP38 is done in reasonably many last-mile port.
> 
> I don't know that that's true, actually; unicast-rpf does, as I understand
> it, most of the work, and is in most of the current firmware.

Even if all of last mile devices support uRPF, which it does not, getting
all these 100s of millions of ports configured correctly does not strike as
practical goal.
Fixing 6000 non-stubby transit providers catering sufficiently small tails
is much more practical goal.

-- 
  ++ytti


home help back first fref pref prev next nref lref last post