nanog mailing list archives
Re: aggregation & table entries
From: Daniel Roesen <dr () cluenet de>
Date: Thu, 14 Oct 2004 22:27:57 +0200
On Thu, Oct 14, 2004 at 08:35:50PM +0200, Iljitsch van Beijnum wrote:
And what do you do with a BGP customer which sends you traffic from prefixes he doesn't want to announce to you? There are such customers.The whole point of BCP38 is that this isn't supposed to happen.
Unfortunately we are living in reality.
Yes, these restrictions are a huge pain in the rear end but a denial of service without even the possibility to tell where the packets come from is MUCH worse.
What you actually want to know is what the ingress interfaces for the flows are. And if the ingress interface is not a p2p interface, from which peer. For both problems quite effective solutions do exist (ok, not really for the latter, but this is highly vendor specific). Given that most DDoSses are mounted via huge zombie collections, there is not much point in knowing the real source IPs. Best regards, Daniel -- CLUE-RIPE -- Jabber: dr () cluenet de -- dr@IRCnet -- PGP: 0xA85C8AA0
Current thread:
- Re: aggregation & table entries, (continued)
- Re: aggregation & table entries Randy Bush (Oct 13)
- Re: aggregation & table entries Stephen Stuart (Oct 13)
- Re: aggregation & table entries Randy Bush (Oct 13)
- Re: aggregation & table entries Stephen Stuart (Oct 13)
- Re: aggregation & table entries Michael . Dillon (Oct 14)
- Re: aggregation & table entries Pekka Savola (Oct 13)
- Re: aggregation & table entries Daniel Roesen (Oct 14)
- Re: aggregation & table entries Pekka Savola (Oct 14)
- Re: aggregation & table entries Daniel Roesen (Oct 14)
- Re: aggregation & table entries Iljitsch van Beijnum (Oct 14)
- Re: aggregation & table entries Daniel Roesen (Oct 14)
- Re: aggregation & table entries Patrick W Gilmore (Oct 14)
- Re: aggregation & table entries Iljitsch van Beijnum (Oct 14)
- Re: aggregation & table entries Paul Vixie (Oct 14)
- Re: aggregation & table entries Christopher L. Morrow (Oct 14)
- Re: aggregation & table entries Paul Vixie (Oct 15)
- Re: aggregation & table entries Christopher L. Morrow (Oct 15)
- Re: aggregation & table entries Paul Vixie (Oct 15)
- Re: aggregation & table entries Christopher L. Morrow (Oct 15)
- Re: BCP38 making it work, solving problems Joe Maimon (Oct 11)