[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

BGPMON Alert Questions



On Thursday, April 10, 2014 09:18:34 AM Randy Bush wrote:

> in our measurements, an rpki-based origin check is
> significantly faster than an acl of non-trivial length.

Ultimately, at some point in the future, it is not 
completely unreasonable to think that some operators could 
attempt control plane filtering based purely on RPKI-based 
origin and AS_PATH validation, without actually needing to 
configure prefix or AS_PATH lists :-).

Wouldn't that be something...

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20140410/8d985426/attachment.bin>