nanog mailing list archives

Re: BCP38 is hard, was TWC (AS11351) blocking all NTP?


From: Randy Bush <randy () psg com>
Date: Wed, 05 Feb 2014 10:13:41 +0900

How does the customer do that in a way that scales?
You implement SIDR to the extent where you issue your multi homed
customers CERTs for the address space you allocated to them.  The
customer can then just send signed requests to a automated service
at the other ISPs along with the CERT which then builds the filters
based on that information after verifying the CERTs authenticity.

you have done this in your network, the isp for which you are an
engineer?

randy


Current thread: