Filter on IXP

Patrick W. Gilmore patrick at ianai.net
Fri Feb 28 16:56:47 UTC 2014


On Feb 28, 2014, at 11:52 , Nick Hilliard <nick at foobar.org> wrote:
> On 28/02/2014 15:42, Jérôme Nicolle wrote:

>> Instead, IXPs _could_ enforce BCP38 too. Mapping the route-server's
>> received routes to ingress _and_ egress ACLs on IXP ports would mitigate
>> the role of BCP38 offenders within member ports. It's almost like uRPF
>> in an intelligent and useable form.
> 
> this will break horribly as soon as you have an IXP member which provides
> transit to other multihomed networks.

Or to anyone who doesn't announce their full downstream table to the route servers. Or to people who don't use route servers. Or to someone who does traffic engineering. Or ....

-- 
TTFN,
patrick





More information about the NANOG mailing list