Re: Tier1 BGP filter generation data sources & frequency

2021-05-21 Thread Aaron Atac via NANOG
Peeringdb mostly. Otherwise, onestep.net has some but not all. whois when in doubt or email their noc. -Aaron May 21, 2021, 16:40 by clin...@scripty.com: > Is there any compiled information for Tier1 providers on the supported BGP > filter generation data sources and frequency? > > This is

Tier1 BGP filter generation data sources & frequency

2021-05-21 Thread Clinton Work
Is there any compiled information for Tier1 providers on the supported BGP filter generation data sources and frequency? This is what I have been able to determine so far: - TATA AS6453: IRR and RPKI ROAs (http://lg.as6453.net/doc/cust-routing-policy.html) - Cogent AS174: unknown -

Re: BGP Traffic Engineering - Active\Passive

2021-05-21 Thread Baldur Norddahl
Hello First one needs to remember that it is always the sender that ultimately decides which path to use. You can use route-map or import policy to override local pref for each matched received prefix to steer exactly which ISP you want to use on a per prefix basis. But so can everyone else. Say

Flowspec IPv6

2021-05-21 Thread Eric Dugas via NANOG
Hello, I've been fiddling with JunOS to enable Flowspec IPv6. According to the docs, it was implemented in 16.x. I've tried to set it up in vRR and vMX in the 20.x train. Everything commit just fine, I get the inetflow.0 for IPv4 but inet6flow.0 is not appearing. I already have a JTAC case (now

Weekly Routing Table Report

2021-05-21 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to

RE: BGP Traffic Engineering - Active\Passive

2021-05-21 Thread t...@pelican.org
On Friday, 21 May, 2021 16:13, "nanoguser100 via NANOG" said: > Correct me if I'm wrong here but I *could* take full table + AS on B > meaning > the traffic will prefer 'B' due it it having a more specific route since I'm > only > taking default from A (despite local pref). That will

Re: BGP Traffic Engineering - Active\Passive

2021-05-21 Thread Chriztoffer Hansen
On Fri, 21 May 2021 at 17:13, nanoguser100 via NANOG wrote: > If I'm unable to do that will most provider prepend on your behalf so that > ISP-A would add the prepends for only? For this part, you will have to investigate which BGP standard/extended/large communities your ISP-A/B supports.

BGP Traffic Engineering - Active\Passive

2021-05-21 Thread nanoguser100 via NANOG
Nanog, At my organization we historically would get T1 ISPs at our POPs and take full table + default. BGP would simply "do it's thing" and for the most part everything worked out. There are instances where we have had heavily lopsided traffic even though AS path length is the same. To make

RE: DDoS attack with blackmail

2021-05-21 Thread Jean St-Laurent via NANOG
I also recommend book Art of War from Sun Tzu. All the answers to your questions are in that book. Jean From: NANOG On Behalf Of Lady Benjamin Cannon of Glencoe, ASCE Sent: May 20, 2021 7:18 PM To: Baldur Norddahl Cc: NANOG Operators' Group Subject: Re: DDoS attack with blackmail

Re: DDoS attack with blackmail

2021-05-21 Thread Lady Benjamin Cannon of Glencoe, ASCE
20 years ago I wrote an automatic teardrop attack. If your IP spammed us 5 times, then a script would run, knocking the remote host off the internet entirely. Later I modified it to launch 1000 teardrop attacks/second… Today, contact the FBI. And get a mitigation service above your borders