Route leak in Bangladesh

Tue Jun 30 14:39:56 UTC 2015

On Tue, 30 Jun 2015, Matsuzaki Yoshinobu wrote:

> Randy Bush <randy at psg.com> wrote
>>> A friend in AS58587 confirmed that this was caused by a configuration
>>> error - it seems like related to redistribution, and they already
>>> fixed that.
>>
>> 7007 all over again.  do not redistribute bgp into igp.  do not
>> redistribute igp into bgp.
>
> I also suggested them to implement BGP community based route filtering
> in their outbound policy.  Any other suggestions or thoughts to
> prevent such incidents in general?

At a minimum, AS-PATH filtering of outgoing routes to just your ASN(s) and 
your downstream customer ASNs.  Whether this is done manually, built 
using AS-SETs from your route registry of choice, or through some other
automated means is another story.

jms