Filter on IXP

Fri Feb 28 17:03:01 UTC 2014

Le 28/02/2014 17:52, Nick Hilliard a écrit :
> this will break horribly as soon as you have an IXP member which provides
> transit to other multihomed networks.

It could break if filters are based on announced prefixes. That's
preciselly why uRPF is often useless.

On the other hand, if a member provides transit, he will add its
customer prefixes to RaDB / RIPEdb with appropriate route objects and
the ACL will be updated accordingly. Shouldn't break there.

-- 
Jérôme Nicolle
+33 6 19 31 27 14