nanog mailing list archives

Re: BGP route hijack by AS10990


From: Patrick Schultz <lists-nanog () schultz top>
Date: Thu, 30 Jul 2020 20:31:09 +0200

I'd like to direct you to Job's writeup on this :) https://mailman.nanog.org/pipermail/nanog/2017-August/191897.html
While these "optimizers" CAN be beneficial to the individual operator, they're apparently used incorrectly in some 
instances.
Telia should've filtered, that's for sure. But the leak shouldn't have occured in the first place.

Am 30.07.2020 um 20:09 schrieb Florian Brandstetter:
Never read something that silly, bgp optimizers are perfectly fine
and every network operator is well within the right to run optimizers,
you should much more ask Telia as to why they accepted the prefixes,
and EVEN MORE ask the operator of 7219 for what specific reason they
are blowing out their full table to 1299. Anyone with a sane mind has
export filters where a specific community or tag serves as some kind
of "do advertise" sign, as opposed to announcing anything BUT external.

May I know the specific reason for such poor attempt of shifting
responsibility for this incident to bgp optimizers instead of those
who clearly don't have a single clue about proper filtering policies?

-- 
Greetings,

Florian Brandstetter
Chief Executive Officer
SquareFlow Corporation
www.squareflow.net

Confidential: Please be advised that the information contained in this
email message, including all attached documents or files, is privileged
and confidential and is intended only for the use of the individual or
individuals addressed. Any other use, dissemination, distribution or
copying of this communication is strictly prohibited.

On 2020-07-30 19:09, Patrick Schultz wrote:
so, bgp optimizers... again?

-- 
Patrick
Am 30.07.2020 um 18:58 schrieb Töma Gavrichenkov:

Peace,

On Thu, Jul 30, 2020, 5:48 AM Clinton Work <clinton () scripty com>
wrote:

We saw a bunch of our IP blocks hijacked by AS10990 from 19:15 MDT
until 20:23 MDT.   Anybody else have problems with that.

Here's what we discovered about the incident.  Hope that brings some
clarity.

https://radar.qrator.net/blog/as10990-routing-optimization-tale

-- 
Töma




Current thread: