[183276] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [c-nsp] Peering + Transit Circuits

daemon@ATHENA.MIT.EDU (Mark Tinka)
Tue Aug 25 08:00:06 2015

X-Original-To: nanog@nanog.org
To: Nick Hilliard <nick@foobar.org>, Tim Durack <tdurack@gmail.com>,
 "Patrick W. Gilmore" <patrick@ianai.net>
From: Mark Tinka <mark.tinka@seacom.mu>
Date: Tue, 25 Aug 2015 13:56:31 +0200
In-Reply-To: <55D39903.6050009@foobar.org>
Cc: NANOG list <nanog@nanog.org>,
 "cisco-nsp@puck.nether.net" <cisco-nsp@puck.nether.net>
Errors-To: nanog-bounces@nanog.org



On 18/Aug/15 22:43, Nick Hilliard wrote:

> i'd advise being careful with this approach: urpf at ixps is a nightmare.

We don't generally do uRPF at exchange points, for the simple reason
that the router is dedicated (meaning it does not carry a full table),
and peers leaking your routes to the Internet (which breaks uRPF in this
scenario) is a constant scenario.

    *sigh*

Mark.


home help back first fref pref prev next nref lref last post