nanog mailing list archives

Re: BCP38 is hard, was TWC (AS11351) blocking all NTP?


From: Saku Ytti <saku () ytti fi>
Date: Wed, 5 Feb 2014 20:01:09 +0200

On (2014-02-05 11:15 -0500), Jared Mauch wrote:

The problem is many of these can compile to larger than the physical amount of space in the router/LC have to handle 
it.  I’ve done presentations to vendors about what percentage (in bytes and per-line) of the configuration is of what 
component.  90%+ tends to be customer-specific prefix-list/set/filter lines.

Absolutely. But the good thing is, we don't need to have it comprehensively
deployed in transit scenarios, just as long as spoofing domains are
sufficiently fragmented DoS attack gets get better pay off from not spoofing.

-- 
  ++ytti


Current thread: