[61199] in North American Network Operators' Group
Re: [Re: Lazy Engineers and Viable Excuses]
daemon@ATHENA.MIT.EDU (Joshua Sahala)
Mon Aug 25 21:22:08 2003
Date: Mon, 25 Aug 2003 21:21:35 -0400
From: Joshua Sahala <joshua.ej.smith@usa.net>
To: Joe Abley <jabley@isc.org>, Haesu <haesu@towardex.com>
Cc: Danny McPherson <danny@tcb.net>, <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
Joe Abley <jabley@isc.org> wrote:
[cut] =
> .. if everybody used the IRR to build explicit filters everywhere, if =
> everybody kept their objects in the IRR up-to-date, and if there was =
> some appropriate authorisation scheme in place to allow you to trust =
> the data in the IRR implicitly, it'd be a perfect world.
not perfect, you would still need to filter at the customer ingress,
making sure that they weren't spoofing a 'properly registered route =
object' that wasn't part of the aup that they had signed....they did
sign an aup right???
> The IRR is currently a reasonable tool to use to avoid listening to =
> routes which are advertised by mistake from peers who populate the IRR =
> accurately. It's not a reasonable tool for avoiding maliciously bogus =
> routes, since sticking maliciously bogus information in the IRR is =
> trivial.
trivial yes, but it would be nice if there was at least a minimal effort
to filter unregistered route objects, especially on transit from certain
regions of the world....we can deal with the registration issue =
separately.
/joshua
=
> Joe
> =
> =
"Walk with me through the Universe,
And along the way see how all of us are Connected.
Feast the eyes of your Soul,
On the Love that abounds.
In all places at once, seemingly endless,
Like your own existence."
- Stephen Hawking -
