Tier 2 ingress filtering

Thu Mar 28 23:45:19 UTC 2013

Saku,

> all these 100s of millions of ports configured correctly does not strike as
> practical goal.

It is practical, IMO, similar to configuring IP address/prefix (or QoS policies) on every port.  

In fact, what makes it easier is that uRPF can be part of the template that can be universally applied to every edge port. 

> Fixing 6000 non-stubby transit providers catering sufficiently small tails
> is much more practical goal.

Agreed.

Cheers,
Rajiv

Sent from my Phone

On Mar 29, 2013, at 7:36 AM, "Saku Ytti" <saku at ytti.fi> wrote:

> On (2013-03-28 15:47 -0400), Jay Ashworth wrote:
> 
>>> You can't do it at top-level nor it's not practical to hope that some
>>> day BCP38 is done in reasonably many last-mile port.
>> 
>> I don't know that that's true, actually; unicast-rpf does, as I understand
>> it, most of the work, and is in most of the current firmware.
> 
> Even if all of last mile devices support uRPF, which it does not, getting
> all these 100s of millions of ports configured correctly does not strike as
> practical goal.
> Fixing 6000 non-stubby transit providers catering sufficiently small tails
> is much more practical goal.
> 
> -- 
>  ++ytti
> 