[170761] in North American Network Operators' Group
Re: BGPMON Alert Questions
daemon@ATHENA.MIT.EDU (Mark Tinka)
Tue Apr 8 08:32:06 2014
From: Mark Tinka <mark.tinka@seacom.mu>
To: Jac Kloots <Jac.Kloots@surfnet.nl>
Date: Tue, 8 Apr 2014 14:29:48 +0200
In-Reply-To: <alpine.OSX.2.00.1404081319100.16685@jacbook-air.local>
Cc: nanog@nanog.org
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--nextPart1761777.2fTdrKpcS2
Content-Type: Text/Plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
On Tuesday, April 08, 2014 01:20:23 PM Jac Kloots wrote:
> Yes, we don't validate those prefixes cause we filter
> them strict. We know from all our customers which
> prefixes they use so we have prefix-filters placed on
> all their connections.
Good point.
We do both - prefix list + AS_PATH filtering as well as=20
origin validation.
At this point, you're likely to lose longer prefixes from=20
customers if they forgot to ROA them, but the rationale is=20
that if a customer has sufficient clue to ROA their=20
aggregate, they can quickly ROA a de-aggregate or fix it in=20
case they forgot.
Mark.
--nextPart1761777.2fTdrKpcS2
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)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=2cn/
-----END PGP SIGNATURE-----
--nextPart1761777.2fTdrKpcS2--
