[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
BGPMON Alert Questions
On Thursday, April 10, 2014 09:18:34 AM Randy Bush wrote:
> in our measurements, an rpki-based origin check is
> significantly faster than an acl of non-trivial length.
Ultimately, at some point in the future, it is not
completely unreasonable to think that some operators could
attempt control plane filtering based purely on RPKI-based
origin and AS_PATH validation, without actually needing to
configure prefix or AS_PATH lists :-).
Wouldn't that be something...
Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20140410/8d985426/attachment.bin>