[194424] in North American Network Operators' Group
Covering prefix blackholing traffic to one of its covered prefixes....
daemon@ATHENA.MIT.EDU (Steven Wallace)
Mon Apr 24 10:46:42 2017
X-Original-To: nanog@nanog.org
From: Steven Wallace <ssw@iu.edu>
Date: Fri, 21 Apr 2017 08:37:46 -0400
To: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_0289911F-EF9B-48D4-8915-17489E6721C9
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
We have dual-homed sites that only accept routes from their peers, and =
default to their transit provider. A site may receive a covering prefix =
from a peer, but since they are not accepting the full table from their =
transit provider they don=E2=80=99t see the covered (i.e., more =
specific). In some cases the peer announcing the covering prefix =
blackholes traffic to the covered prefix.
Is this accepted behavior, or should a peer announcing a covering prefix =
always delver packets to its covered routes?
Does this happen often?
Thanks!
Steven Wallace
Indiana University=
--Apple-Mail=_0289911F-EF9B-48D4-8915-17489E6721C9
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKmjCCBOow
ggPSoAMCAQICECeaPwnGr8aRr9rqNxvvpm8wDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNVBAYTAlVT
MQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoTFVRoZSBVU0VS
VFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3QuY29tMTYwNAYDVQQD
Ey1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgRW1haWwwHhcNMTEwMjEx
MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjBkMQswCQYDVQQGEwJVUzESMBAGA1UEChMJSW50ZXJuZXQy
MREwDwYDVQQLEwhJbkNvbW1vbjEuMCwGA1UEAxMlSW5Db21tb24gU3RhbmRhcmQgQXNzdXJhbmNl
IENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANPgFQJ7+XaC6f6RlvPw
HiFotQ1hML4Jl2bdHSOn+x+GeDrml2rHwaR/iU2znlmzOAsfOSJrAigSvymW0TX0lSpsBpgcGWRc
pn5FbiBrkbh0DzxTyIMZaxGjxyyFBR6H1MugCAUGLmaJPXing5NUt9gX6tPufWbUNN6Jyhn9N8rQ
g95RaNha9XTr3YICWvogzqrPQCvTyJ6F6YEzm9bxT5FF2Y0zKRxdB5qF6f/JErJMDEIq7TD019yZ
tc8LgOp53qcjYp+16Zai1rIaRdDYEx2SefSEgT22FY/ubywaxuxdrJOPC0dNOjsJ1d4GIjoRlZBv
Tnsfci4nkTM+iFfCvwkCAwEAAaOCAUswggFHMB8GA1UdIwQYMBaAFImCZ33EnSZwAEu0UEh83j2u
BG59MB0GA1UdDgQWBBTo172Wqt3QCO+hM55eWZg8ErebkTAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0T
AQH/BAgwBgEB/wIBADARBgNVHSAECjAIMAYGBFUdIAAwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDov
L2NybC51c2VydHJ1c3QuY29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRF
bWFpbC5jcmwwdAYIKwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVz
dC5jb20vVVROQWRkVHJ1c3RDbGllbnRfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51
c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQAO7bbgOJ86aKIBwfCE5Sbu/IHS14zJGyRD
oMmxheaf5OAq0UTe8qBwrYgYKEiWExJHSfnKOaNX181ThU239y8f2atTemkHTshCv+LsXjt79D6y
pEmWkRZ7+U9qXkJyMdHTQ6E5BYk+y7XR6T4RxoR1zjW/9S3ooqv1pAFOcBwmZasWw70y5ikQL2tq
skjWcAYG9SjoVH7MEMVprhHpBes7OMFiWtAeGOlcTVP49Srh3ZI1hPoljx/HI1ka+KIlpVZi4t44
rNTfM1diATgqUSo7TLlHsHHpySHBYY7SY626SSsiAKw2NRBIDl7B7B2x22JekwPq5VBI71GrIYr7
YMXCMIIFqDCCBJCgAwIBAgIRAJYz8yWq5F4cq8VfQ3Q3WTYwDQYJKoZIhvcNAQEFBQAwZDELMAkG
A1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xLjAsBgNVBAMT
JUluQ29tbW9uIFN0YW5kYXJkIEFzc3VyYW5jZSBDbGllbnQgQ0EwHhcNMTYwOTE1MDAwMDAwWhcN
MTcwOTE1MjM1OTU5WjCBwzEOMAwGA1UEERMFNDc0MDUxGzAZBgNVBAoTEkluZGlhbmEgVW5pdmVy
c2l0eTEXMBUGA1UECRMOOTAwIEUuIDd0aCBTdC4xFzAVBgNVBAkTDjkwMCBFLiA3dGggU3QuMQsw
CQYDVQQIEwJJTjEUMBIGA1UEBxMLQmxvb21pbmd0b24xCzAJBgNVBAYTAlVTMRcwFQYDVQQDEw5T
dGV2ZW4gV2FsbGFjZTEZMBcGCSqGSIb3DQEJARYKc3N3QGl1LmVkdTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAK+D3J0+mbnwW2kkMJquzF00y1IJOKxgfX9agn1vCKz9Cj/qcDBPXHtd
C6+AoLmpT9PXgzesxVwYTSQzDbI+wwJ0fGWPcYIreBujmdRIAhNKrzh7XAD3IFZo5L9Hh7ymx3r5
9oz65ELUN6xUfNagLxZIumAAD+SaojmhsIJj+A2Jph75PtST0noPMDbNBzQbi7irNQAabRQBUE5V
saP11IXjBJszXvgiLmvpAD7Nm4TWrGX8IpwPAiXvxkNpiylv/sq9uY3ERYID70nuYxmYkyQLAd8T
s3hFl/165r8ePlM3nQ2JwK6Rjtwfip/ogCz0SNxjARCadiVnUxTvx0oCvg0CAwEAAaOCAfMwggHv
MB8GA1UdIwQYMBaAFOjXvZaq3dAI76Eznl5ZmDwSt5uRMB0GA1UdDgQWBBTawIOogHrtWw0S4H2M
sPgM09xzxzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD
BAYIKwYBBQUHAwIwagYDVR0gBGMwYTBfBg0rBgEEAa4jAQQDAwABME4wTAYIKwYBBQUHAgEWQGh0
dHBzOi8vd3d3LmluY29tbW9uLm9yZy9jZXJ0L3JlcG9zaXRvcnkvY3BzX3N0YW5kYXJkX2NsaWVu
dC5wZGYwTgYDVR0fBEcwRTBDoEGgP4Y9aHR0cDovL2NybC5pbmNvbW1vbi5vcmcvSW5Db21tb25T
dGFuZGFyZEFzc3VyYW5jZUNsaWVudENBLmNybDCBgAYIKwYBBQUHAQEEdDByMEoGCCsGAQUFBzAC
hj5odHRwOi8vY2VydC5pbmNvbW1vbi5vcmcvSW5Db21tb25TdGFuZGFyZEFzc3VyYW5jZUNsaWVu
dENBLmNydDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuaW5jb21tb24ub3JnMDEGA1UdEQQqMCig
GgYKKwYBBAGCNxQCA6AMDApzc3dAaXUuZWR1gQpzc3dAaXUuZWR1MA0GCSqGSIb3DQEBBQUAA4IB
AQAVmWBFM0OV5KofJR1OANdvDNQj9R6+pk1CSWpYoTXfRhgPYZwMaOlEP416IM/m7X/IkN5ktk1X
EdHcVfL5zIMR2afacBZOkYvGQblmMWsw0noODUB1emW+pumvaCyAv1bd8nnrCEnFKv4gRtfLMNWg
frjNMHPheyByp/O4U9shf52h1hPJwCrcN4kINeGdRhNx3kTIufknI/PyA2XR2Dcawi5InfTsJC7S
8vAUkziG7k98SCklIpBEAv9UIF2Ivpyi5XwKh0Pw3LQdRITsEN6ar6DtRWmAMvCGMvkBMaPmFt8L
yrFXmmuPxnt2rovWbsrnSUDe1diWoFY/yfabLbMcMYIDGTCCAxUCAQEweTBkMQswCQYDVQQGEwJV
UzESMBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEuMCwGA1UEAxMlSW5Db21t
b24gU3RhbmRhcmQgQXNzdXJhbmNlIENsaWVudCBDQQIRAJYz8yWq5F4cq8VfQ3Q3WTYwCQYFKw4D
AhoFAKCCAXUwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTcwNDIx
MTIzNzQ2WjAjBgkqhkiG9w0BCQQxFgQUpO5pPqBBwN3pyA8b7gi8Dk1JQKgwgYgGCSsGAQQBgjcQ
BDF7MHkwZDELMAkGA1UEBhMCVVMxEjAQBgNVBAoTCUludGVybmV0MjERMA8GA1UECxMISW5Db21t
b24xLjAsBgNVBAMTJUluQ29tbW9uIFN0YW5kYXJkIEFzc3VyYW5jZSBDbGllbnQgQ0ECEQCWM/Ml
quReHKvFX0N0N1k2MIGKBgsqhkiG9w0BCRACCzF7oHkwZDELMAkGA1UEBhMCVVMxEjAQBgNVBAoT
CUludGVybmV0MjERMA8GA1UECxMISW5Db21tb24xLjAsBgNVBAMTJUluQ29tbW9uIFN0YW5kYXJk
IEFzc3VyYW5jZSBDbGllbnQgQ0ECEQCWM/MlquReHKvFX0N0N1k2MA0GCSqGSIb3DQEBAQUABIIB
AKksFFdQj59PI3FNZbz2HQ+2ErUXy7dE5UVkVP6CVQ6TTW86ogCwRHML2EkPvs0U9iUf4e78BNOO
nrQmQIwDv8NDTVn1DCrCA+TScS9BxS88OhR6kI1ASTYFBF9FXHi78OE3+iZP3S4ZY2146tZuQG7h
+JWxn9z3i/0n6Y8PRJ+fOxof4dsM7MWBKq3OHaryOW5i8vs4J1lX0VWVr8IlibqxbrCMXrbB+2QO
M0VVqVuNzXe/E9CMVZHLpmO2Dj4PSBbjXnIv7nB+zwLrgvyV3v/bSRllvxZjeHyI+79BUs7zfivK
jFmQJ+Ay3yhkhASQO3OFslVW5ls2BnV13LwB9/IAAAAAAAA=
--Apple-Mail=_0289911F-EF9B-48D4-8915-17489E6721C9--
