[177478] in North American Network Operators' Group
Re: Re: Private ASNs in the wild
daemon@ATHENA.MIT.EDU (Mark Tinka)
Fri Jan 23 12:51:05 2015
X-Original-To: nanog@nanog.org
From: Mark Tinka <mark.tinka@seacom.mu>
To: nanog@nanog.org
Date: Fri, 23 Jan 2015 19:50:50 +0200
In-Reply-To: <548A20DE.5070901@kenweb.org>
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces@nanog.org
--nextPart2801008.82RSyliqGc
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="utf-8"
On Thursday, December 11, 2014 05:55:26 PM ML wrote:
> There are sloppy networks out there. If it was a big
> enough problem all you'd need is a few key networks drop
> those prefixes and we'd have a...slightly less sloppy
> Internet?
Router software (speaking of Cisco and Juniper in this case) has developed
reasonably well that one can now strip private ASN's from the AS_PATH
even though they now appear in between public ASN's.
This was not possible before, as private AS filtering was only possible if
they appeared contiguously in the AS_PATH.
Of course, this means running later code - but chances are that if you're
running code that supports 4-byte ASN's, you might have this feature.
Not sure about other vendors out there.
We, for example, remove private ASN's by default on all eBGP sessions. I
know several other providers that do the same - but it takes a village to
raise the Internet...
Mark.
--nextPart2801008.82RSyliqGc
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=ybVW
-----END PGP SIGNATURE-----
--nextPart2801008.82RSyliqGc--
