[195532] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Cogent BCP-38

daemon@ATHENA.MIT.EDU (Mikael Abrahamsson)
Thu Aug 17 02:27:22 2017

X-Original-To: nanog@nanog.org
Date: Thu, 17 Aug 2017 08:27:17 +0200 (CEST)
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: chris <tknchris@gmail.com>
In-Reply-To: <CAKnNFz8_vkOLtRGAj2z4zSvZOU9AiJwWApPnBjZZK5TcLhYp7g@mail.gmail.com>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org

On Thu, 17 Aug 2017, chris wrote:

> Time for someone to bake them a bcp38 cake ....

I am all for people deploying BCP38, but from the original email this is 
definitely not a cause for celebration. BCP38 should be used against 
single homed customers only if you're doing it by using uRPF. Otherwise 
extreme care needs to be taken to make sure traffic isn't dropped because 
uRPF does the wrong thing (like it seems in this case).

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se

home help back first fref pref prev next nref lref last post