Prefix hijacking, how to prevent and fix currently

Randy Bush randy at
Fri Aug 29 09:39:32 UTC 2014

>>> Loose mode would drop failing routes, iff there is covering (i.e. less
>>> specific is ok) route already in RIB.
>> isn't that exactly the hole punching attack?
> No, as the the more specific route is signed and is preferred (longest
> match routing) against the less specific hijacked route

clearly i am missing something.  got a write-up?


More information about the NANOG mailing list