On Thursday, April 10, 2014 09:18:34 AM Randy Bush wrote: > in our measurements, an rpki-based origin check is > significantly faster than an acl of non-trivial length.
Ultimately, at some point in the future, it is not completely unreasonable to think that some operators could attempt control plane filtering based purely on RPKI-based origin and AS_PATH validation, without actually needing to configure prefix or AS_PATH lists :-). Wouldn't that be something... Mark.
signature.asc
Description: This is a digitally signed message part.
