[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Consistent routing policy?

Subject: Consistent routing policy?
From: niels=nanog at bakker.net (Niels Bakker)
Date: Mon, 16 Sep 2019 19:19:09 +0200
In-reply-to: <CA+FDd[email protected]>
References: <CA[email protected]> <[email protected]> <CA+GrwCOpEs[email protected]> <[email protected]> <[email protected]> <CA+FDd[email protected]>

>> https://archive.nanog.org/meetings/nanog40/presentations/BGPcommunities.pdf
>>Donâ??t let anyone send you Informational tags, these should only be 
>>set by you, and you should strip them from all BGP neighbors 
>>(customers, transits, peers, etc). Otherwise you have a massive 
>>security problem.

* ross at tajvar.io (Ross Tajvar) [Mon 16 Sep 2019, 19:14 CEST]:
>I often see informational tags propagated through multiple ASes. 
>What is the security risk there?

Don't let anyone send you *your* informational tags.


	-- Niels.

References:
- Consistent routing policy?
  - From: benlogan at myriverstreet.net (Ben Logan)
- Consistent routing policy?
  - From: mark.tinka at seacom.mu (Mark Tinka)
- Consistent routing policy?
  - From: benlogan at myriverstreet.net (Ben Logan)
- Consistent routing policy?
  - From: mark.tinka at seacom.mu (Mark Tinka)
- Consistent routing policy?
  - From: martijnschmidt at i3d.net (Martijn Schmidt)
- Consistent routing policy?
  - From: ross at tajvar.io (Ross Tajvar)

Prev by Date: Consistent routing policy?
Next by Date: Consistent routing policy?
Previous by thread: Consistent routing policy?
Next by thread: Consistent routing policy?
Index(es):
- Date
- Thread