[181655] in North American Network Operators' Group
Re: Route leak in Bangladesh
daemon@ATHENA.MIT.EDU (Sandra Murphy)
Tue Jun 30 10:45:50 2015
X-Original-To: nanog@nanog.org
From: Sandra Murphy <sandy@tislabs.com>
In-Reply-To: <20150630134118.GU95870@Vurt.local>
Date: Tue, 30 Jun 2015 10:44:00 -0400
To: North American Network Operators' Group <nanog@nanog.org>
Cc: Sandra Murphy <sandy@tislabs.com>
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_C0E29BFD-5BB4-42E4-B077-0170CC9E2464
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
On Jun 30, 2015, at 9:41 AM, Job Snijders <job@instituut.net> wrote:
>=20
> In addition to the BGP community scheme, outbound as-path filters =
could
> help. Most network's list of transit providers is fairly static, it
> would be easiy with as-path filters to prevent announcing upstream
> routes to other upstreams or peering partners.
Except that this was not a route leak per se. The announced routes =
AS_PATH shows them as originated by the offending AS, not *propagated* =
by the offending AS. So the outbound AS_PATH did not retain the upstream =
portion of the path.
--Sandy
--Apple-Mail=_C0E29BFD-5BB4-42E4-B077-0170CC9E2464
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org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=Qv76
-----END PGP SIGNATURE-----
--Apple-Mail=_C0E29BFD-5BB4-42E4-B077-0170CC9E2464--
