[170827] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: BGPMON Alert Questions

daemon@ATHENA.MIT.EDU (Randy Bush)
Thu Apr 10 03:19:15 2014

Date: Thu, 10 Apr 2014 16:18:34 +0900
From: Randy Bush <randy@psg.com>
To: Jac Kloots <Jac.Kloots@surfnet.nl>
In-Reply-To: <alpine.OSX.2.00.1404081319100.16685@jacbook-air.local>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

> Yes, we don't validate those prefixes cause we filter them strict.

in our measurements, an rpki-based origin check is significantly faster
than an acl of non-trivial length.

randy


home help back first fref pref prev next nref lref last post