[186586] in North American Network Operators' Group
Re: de-peering for security sake
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Thu Dec 24 19:49:10 2015
X-Original-To: nanog@nanog.org
To: Colin Johnston <colinj@gt86car.org.uk>
From: Valdis.Kletnieks@vt.edu
In-Reply-To: <C4E2719E-3BFB-4DA0-A3A6-6C9F2F010D85@gt86car.org.uk>
Date: Thu, 24 Dec 2015 19:48:59 -0500
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
--==_Exmh_1451004539_10192P
Content-Type: text/plain; charset=us-ascii
On Thu, 24 Dec 2015 23:44:10 +0000, Colin Johnston said:
> We really need to ask if China and Russia for that matter will not take abuse
> reports seriously why allow them to network to the internet ?
Well, first off, it isn't like China or Russia are just one ASN. You'd have
to de-peer a bunch of ASN's - and also eliminate any paid transit connections.
Note that even North Korea has managed to land at least a small presence on
the Internet. Are you going to ban them too?
While we're banning countries, how about the country that's known for
widespread surveillance both foreign and domestic, has one of the strongest
cyber warfare arsenals around, and has been caught multiple times diverting and
backdooring routers sold to foreign countries?
Oh wait, that's the US. Maybe we better rethink this?
Obviously, there's a lot of organizations that think that being able to
communicate with China and Russia outweighs the security issues. You are
of course welcome to make a list of all Russian and Chinese ASNs and block
their prefixes at your border.
--==_Exmh_1451004539_10192P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Exmh version 2.5 07/13/2001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=XnvA
-----END PGP SIGNATURE-----
--==_Exmh_1451004539_10192P--
