IP DSCP across the Internet

Blake Dunlap ikiris at gmail.com
Wed May 6 02:27:53 UTC 2015


If there isn't a specific peering agreement which sets up DSCP marks
with your Z side, you're going to have a bad time doing anything other
than remarking to 0.

-Blake

On Tue, May 5, 2015 at 6:35 PM, Tim Jackson <jackson.tim at gmail.com> wrote:
> In general there are very few bad actors here in regards to
> trusting/accepting/using DSCP across the internet.
>
> Apple has a tendency to mark some traffic with EF that shouldn't be EF on
> PNIs, and Cogent leaks a lot of their internal markings into customers, but
> it's generally unmarked traffic from certain customers/peers. Other than
> that IMHO it's totally valid to accept, and nobody abuses it (other than
> those 2).
>
> We accept DSCP from the internet and do queue a few things higher towards
> customers for things like OTT VoIP etc.
>
> Remarking DSCP is bad IMHO, trusting it is another thing. You just have to
> be careful, and I suggest good netflow tools to keep an eye on it.
> On May 5, 2015 5:30 PM, "Ramy Hashish" <ramy.ihashish at gmail.com> wrote:
>
>> Good day all,
>>
>> A simple question, does Internet trust IP DSCP marking? Assume two ASs
>> connected through two tier 1 networks, will the tier one networks trust any
>> DSCP markings done from an AS to the other?
>>
>> Thanks,
>>
>> Ramy
>>



More information about the NANOG mailing list