BGPMON Alert Questions

Tue Apr 8 12:29:48 UTC 2014

On Tuesday, April 08, 2014 01:20:23 PM Jac Kloots wrote:

> Yes, we don't validate those prefixes cause we filter
> them strict. We know from all our customers which
> prefixes they use so we have prefix-filters placed on
> all their connections.

Good point.

We do both - prefix list + AS_PATH filtering as well as 
origin validation.

At this point, you're likely to lose longer prefixes from 
customers if they forgot to ROA them, but the rationale is 
that if a customer has sufficient clue to ROA their 
aggregate, they can quickly ROA a de-aggregate or fix it in 
case they forgot.

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20140408/224c6b24/attachment.sig>