nanog mailing list archives
Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?)
From: Christopher Morrow <morrowc.lists () gmail com>
Date: Fri, 28 Feb 2014 11:49:36 -0500
On Fri, Feb 28, 2014 at 9:02 AM, Ray Soucy <rps () maine edu> wrote:
If you have uRPF enabled on all your access routers then you can configure routing policy such that advertising a route for a specific host system will trigger uRPF to drop the traffic at the first hop, in hardware.
note that 'in hardware' is dependent upon the model used... note that stuffing 2k (or 5 or 10 or...) extra routes into your edge device could make it super unhappy. your points are valid for your designed network... they may not work everywhere. making the features you point out work better or be more widely known seems like a great idea though :)
Current thread:
- Re: Filter NTP traffic by packet size?, (continued)
- Re: Filter NTP traffic by packet size? Nick Hilliard (Feb 25)
- Re: Filter NTP traffic by packet size? Blake Hudson (Feb 25)
- Re: Filter NTP traffic by packet size? Keegan Holley (Feb 26)
- Re: Filter NTP traffic by packet size? Brandon Galbraith (Feb 26)
- Managing ACL exceptions (was Re: Filter NTP traffic by packet size?) Jay Ashworth (Feb 26)
- Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?) Keegan Holley (Feb 27)
- Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?) Ray Soucy (Feb 28)
- Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?) Jay Ashworth (Feb 28)
- Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?) Ray Soucy (Feb 28)
- Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?) Jay Ashworth (Feb 28)
- Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?) Christopher Morrow (Feb 28)
- Re: Filter NTP traffic by packet size? Valdis . Kletnieks (Feb 26)
- Re: Filter NTP traffic by packet size? Jared Mauch (Feb 26)
- Re: Filter NTP traffic by packet size? Randy Bush (Feb 26)
- Re: Filter NTP traffic by packet size? Frank Habicht (Feb 26)
- Re: Filter NTP traffic by packet size? Jimmy Hess (Feb 26)
- Re: Filter NTP traffic by packet size? Niels Bakker (Feb 28)
- Re: Filter NTP traffic by packet size? Randy Bush (Feb 28)
- Re: Filter NTP traffic by packet size? Niels Bakker (Feb 28)
- Re: Filter NTP traffic by packet size? Robert Drake (Feb 26)
- Re: Filter NTP traffic by packet size? Keegan Holley (Feb 27)