[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Request comment: list of IPs to block outbound

Subject: Request comment: list of IPs to block outbound
From: saku at ytti.fi (Saku Ytti)
Date: Mon, 14 Oct 2019 09:14:37 +0300
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]>

On Mon, 14 Oct 2019 at 03:38, Grant Taylor via NANOG <nanog at nanog.org> wrote:

> I think you should seriously re-consider using rp_filter on a router.

rp_filter is one of the most expensive features in modern routers, you
should only use it, if PPS performance is not important. If PPS
performance is important, ACL is much faster. ACL is also applicable
to more scenarios, such as BGP customers.
-- 
  ++ytti

Follow-Ups:
- Request comment: list of IPs to block outbound
  - From: bernat at luffy.cx (Vincent Bernat)

References:
- Request comment: list of IPs to block outbound
  - From: list at satchell.net (Stephen Satchell)
- Request comment: list of IPs to block outbound
  - From: gtaylor at tnetconsulting.net (Grant Taylor)

Prev by Date: Request comment: list of IPs to block outbound
Next by Date: Request comment: list of IPs to block outbound
Previous by thread: Request comment: list of IPs to block outbound
Next by thread: Request comment: list of IPs to block outbound
Index(es):
- Date
- Thread