nanog mailing list archives

Re: [c-nsp] DNS amplification


From: Jared Mauch <jared () puck nether net>
Date: Tue, 19 Mar 2013 14:32:36 -0400


On Mar 19, 2013, at 2:15 PM, "Patrick W. Gilmore" <patrick () ianai net> wrote:

Has anyone implemented (properly) FIB compression?

Since you say FIB, yes.  If all RIB prefixes and their sub-prefixes go the same next-hop, then you don't need to 
install additional entries in the FIB.  Some platforms only can install ~8k/second.  Reducing duplicate entries is 
always helpful.

One can't do RIB compression due to the nature of the protocol.

- Jared

Current thread: