nanog mailing list archives
Re: Trusted Networks Initiative: DDoS fallback set of AS'es
From: joel jaeggli <joelja () bogus com>
Date: Thu, 16 Apr 2015 13:42:03 -0700
On 4/16/15 1:30 PM, Valdis.Kletnieks () vt edu wrote:
On Thu, 16 Apr 2015 22:13:56 +0200, Job Snijders said:If you don't want packets from 1312 don't announce to them?I'm probably at least 4-5 AS's away, and you're probably routed to us through Cogent or similar large transit. Feel free to not announce your routes to Cogent because you don't want packets from my AS... (For whatever value of "Cogent" you have for your upstream)
bearing in mind that transit providers rarely give you communities to influence their customers, just peers. There is an illusion of control that provider no export communities provide that always requires confirmation when applied. if 1312 buys the full internet cone they can also install a default. so they can send you packets even if they in fact do not have your route. my assumption is there is more default out there then generally assumed and work to replicate the findings in http://www.eecs.qmul.ac.uk/~steve/papers/imc099-bush.pdf would probably find the same thing.
Attachment:
signature.asc
Description: OpenPGP digital signature
Current thread:
- Trusted Networks Initiative: DDoS fallback set of AS'es David Hofstee (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Christopher Morrow (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Valdis . Kletnieks (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Job Snijders (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Valdis . Kletnieks (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es joel jaeggli (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Christopher Morrow (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Randy Bush (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Christopher Morrow (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Randy Bush (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Daniel Karrenberg (Apr 22)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Randy Bush (Apr 29)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Valdis . Kletnieks (Apr 16)
- Re: Trusted Networks Initiative: DDoS fallback set of AS'es Christopher Morrow (Apr 16)