[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Route leak in Bangladesh

Subject: Route leak in Bangladesh
From: mark.tinka at seacom.mu (Mark Tinka)
Date: Tue, 30 Jun 2015 15:29:57 +0200
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <m2y4j1tqfg.wl%[email protected]> <[email protected]>


On 30/Jun/15 15:22, Matsuzaki Yoshinobu wrote:
> I also suggested them to implement BGP community based route filtering
> in their outbound policy.  Any other suggestions or thoughts to
> prevent such incidents in general?

    - Get your downstreams to create route objects before you turn them up.
    - Get your provisioning teams to validate the prefixes being
provided by your downstreams.
    - Use both prefix- and AS_PATH-based filters for your downstreams.
    - Use BGP communities (as you've stated).
    - No exceptions.

Mark.

Follow-Ups:
- Route leak in Bangladesh
  - From: nick at foobar.org (Nick Hilliard)

References:
- Route leak in Bangladesh
  - From: Grzegorz at Janoszka.pl (Grzegorz Janoszka)
- Route leak in Bangladesh
  - From: maz at iij.ad.jp (Matsuzaki Yoshinobu)
- Route leak in Bangladesh
  - From: randy at psg.com (Randy Bush)
- Route leak in Bangladesh
  - From: maz at iij.ad.jp (Matsuzaki Yoshinobu)

Prev by Date: Route leak in Bangladesh
Next by Date: Route leak in Bangladesh
Previous by thread: Route leak in Bangladesh
Next by thread: Route leak in Bangladesh
Index(es):
- Date
- Thread