Announcing Peering-LAN prefixes to customers
Dominic Schallert
ds at schallert.com
Thu Dec 20 18:15:46 UTC 2018
Dear Job, Michael, Ross,
thank you very much for sharing your opinion, the detailed info and references. That’s pretty much what I excpected.
Just wondered because I couldn’t find any IXP Conection Agreement stating this „issue“ explicitly yet.
Maybe MANRS IXP actions has some recommendations regarding this, checking that now.
Best wishes and happy holidays
Cheers
Dominic
> Am 20.12.2018 um 19:06 schrieb Michael Still <stillwaxin at gmail.com>:
>
> IXP LANs should not be announced via BGP (or your IGP either). See section 3.1:
> http://nabcop.org/index.php/BCOP-Exchange_Points_v2 <http://nabcop.org/index.php/BCOP-Exchange_Points_v2>
>
>
>
> On Thu, Dec 20, 2018 at 12:50 PM Dominic Schallert <ds at schallert.com <mailto:ds at schallert.com>> wrote:
> Hi all,
>
> this might be a stupid question but today I was discussing with a colleague if Peering-LAN prefixes should be re-distributed/announced to direct customers/peers. My standpoint is that in any case, Peering-LAN prefixes should be filtered and not announced to peers/customers because a Peering-LAN represents some sort of DMZ and there is simply no need for them to be reachable by third-parties not being physically connected to an IXP themselves. Also from a security point of view, a lot of new issues might occur in this situation.
>
> I’ve been seeing a few transit providers lately announcing (even reachable) Peering-LAN prefixes (for example DE-CIX Peering LAN) to their customers. I’m wondering if there is any document or RFC particularly describing this matter?
>
> Thanks
> Dominic
>
>
> --
> [stillwaxin at gmail.com <mailto:stillwaxin at gmail.com> ~]$ cat .signature
> cat: .signature: No such file or directory
> [stillwaxin at gmail.com <mailto:stillwaxin at gmail.com> ~]$
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20181220/63fb17f0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20181220/63fb17f0/attachment.sig>
More information about the NANOG
mailing list