nanog mailing list archives

Re: Tier 2 ingress filtering


From: "Rajiv Asati (rajiva)" <rajiva () cisco com>
Date: Thu, 28 Mar 2013 23:45:19 +0000

Saku,

all these 100s of millions of ports configured correctly does not strike as
practical goal.

It is practical, IMO, similar to configuring IP address/prefix (or QoS policies) on every port.  

In fact, what makes it easier is that uRPF can be part of the template that can be universally applied to every edge 
port. 

Fixing 6000 non-stubby transit providers catering sufficiently small tails
is much more practical goal.

Agreed.

Cheers,
Rajiv

Sent from my Phone

On Mar 29, 2013, at 7:36 AM, "Saku Ytti" <saku () ytti fi> wrote:

On (2013-03-28 15:47 -0400), Jay Ashworth wrote:

You can't do it at top-level nor it's not practical to hope that some
day BCP38 is done in reasonably many last-mile port.

I don't know that that's true, actually; unicast-rpf does, as I understand
it, most of the work, and is in most of the current firmware.

Even if all of last mile devices support uRPF, which it does not, getting
all these 100s of millions of ports configured correctly does not strike as
practical goal.
Fixing 6000 non-stubby transit providers catering sufficiently small tails
is much more practical goal.

-- 
 ++ytti



Current thread: