Re: v4 and v6 BOGON list
+1 On 3/22/24 11:28, Suresh Ramasubramanian wrote: bogons.cymru.com has been around as a BGP feed for a long long time. https://www.team-cymru.com/bogon-networks <https://www.team-cymru.com/bogon-networks> *From: *NANOG on behalf of Gabriel Terry *Date: *Friday, 22 March 2024 at 3:56 PM *To: *nanog@nanog.org *Subject: *v4 and v6 BOGON list All, I was researching BOGON prefixes and found a reference from IANA listing special-purpose addresses, URLs listed below. Based on my understanding of the list I think I should be able to block all of the entries from my upstream peerings without affecting normal internet traffic. I assume that there would only be special scenarios that the addresses listed in the special-purpose entry would be used. I am interested to hear what others are doing when it comes to blocking BOGON NLRI from their upstream BGP peerings. If anyone has any insight into this please let me know your thoughts, I would love to discuss more on the topic. URLs: https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml <https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml> https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml <https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml> *Thanks,* *Gabriel L. Terry*
Re: v4 and v6 BOGON list
bogons.cymru.com has been around as a BGP feed for a long long time. https://www.team-cymru.com/bogon-networks From: NANOG on behalf of Gabriel Terry Date: Friday, 22 March 2024 at 3:56 PM To: nanog@nanog.org Subject: v4 and v6 BOGON list All, I was researching BOGON prefixes and found a reference from IANA listing special-purpose addresses, URLs listed below. Based on my understanding of the list I think I should be able to block all of the entries from my upstream peerings without affecting normal internet traffic. I assume that there would only be special scenarios that the addresses listed in the special-purpose entry would be used. I am interested to hear what others are doing when it comes to blocking BOGON NLRI from their upstream BGP peerings. If anyone has any insight into this please let me know your thoughts, I would love to discuss more on the topic. URLs: https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml Thanks, Gabriel L. Terry
Re: v4 and v6 BOGON list
Hi Gabriel, for v6 you may find the following helpful: https://theinternetprotocolblog.wordpress.com/2020/01/15/some-notes-on-ipv6-bogon-filtering/ cheers Enno On Thu, Mar 21, 2024 at 07:20:53PM +, Gabriel Terry wrote: > All, > > I was researching BOGON prefixes and found a reference from IANA listing > special-purpose addresses, URLs listed below. Based on my understanding of > the list I think I should be able to block all of the entries from my > upstream peerings without affecting normal internet traffic. I assume that > there would only be special scenarios that the addresses listed in the > special-purpose entry would be used. I am interested to hear what others are > doing when it comes to blocking BOGON NLRI from their upstream BGP peerings. > If anyone has any insight into this please let me know your thoughts, I would > love to discuss more on the topic. > > URLs: > https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml > https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml > > Thanks, > > Gabriel L. Terry > -- Enno Rey Cell: +49 173 6745902 Twitter: @Enno_Insinuator IPv6 Blog: https://theinternetprotocolblog.wordpress.com
Re: v4 and v6 BOGON list
Hi Gabriel, On Thu, 21 Mar 2024 at 15:02, Gabriel Terry wrote: > > All, > > > > I was researching BOGON prefixes and found a reference from IANA listing > special-purpose addresses, URLs listed below. Based on my understanding of > the list I think I should be able to block all of the entries from my > upstream peerings without affecting normal internet traffic. You should look at the values in the globally reachable column. Some of the entries should be globally reachable, barring your own local policy. For instance, many networks want to allow access to the AS112 service. Regards, Leo
v4 and v6 BOGON list
All, I was researching BOGON prefixes and found a reference from IANA listing special-purpose addresses, URLs listed below. Based on my understanding of the list I think I should be able to block all of the entries from my upstream peerings without affecting normal internet traffic. I assume that there would only be special scenarios that the addresses listed in the special-purpose entry would be used. I am interested to hear what others are doing when it comes to blocking BOGON NLRI from their upstream BGP peerings. If anyone has any insight into this please let me know your thoughts, I would love to discuss more on the topic. URLs: https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml Thanks, Gabriel L. Terry