nanog mailing list archives

Re: Why won't providers source-filter attacks? Simple.


From: Randy Bush <randy () psg com>
Date: Thu, 06 Feb 2014 12:43:12 +0900

The last-mile is the best possible place to filter, without breaking
things.
I could not agree more. :-)

very large consumer populations are on metro-ether-like things.  and it
gets kinkier from there, don't eat before looking at what ntt-east has
done with ngn.

i fear we really have most of the easy big deployments and all of the
cool kids.  we're down to statistically small stubborn do-nothings and
some folk with equipment that will take years to be pushed off net.

randy


Current thread: