Ingress filtering on transits, peers, and IX ports

Nick Hilliard nick at foobar.org
Wed Oct 14 08:12:22 UTC 2020


Brian Knight via NANOG wrote on 13/10/2020 23:49:
> Strict mode won't work for us, because with our multi-homed transits and 
> IX peers, we will almost certainly drop a legitimate packet because the 
> best route is through another transit.

there's no "almost" about it: strict mode is unfeasible for both transit 
and IX ports.

Nick


More information about the NANOG mailing list