Re: Ingress filtering on transits, peers, and IX ports

[Nick Hilliard <nick () foobar org>]

Brian Knight via NANOG wrote on 13/10/2020 23:49:
> Strict mode won't work for us, because with our multi-homed transits and 
> IX peers, we will almost certainly drop a legitimate packet because the 
> best route is through another transit.

there's no "almost" about it: strict mode is unfeasible for both transit 
and IX ports.

Nick