Re: Howto for BGP black holing/null routing

2011-02-23 Thread Jeff Wheeler
On Tue, Feb 22, 2011 at 4:55 PM, Jack Carrozzo j...@crepinc.com wrote: Maybe I read your question wrong, but null-routing things at your border is often not very useful if the traffic is flooding your transit links. Most transits publish their community lists - you just need to tag the prefix

Re: Howto for BGP black holing/null routing

2011-02-23 Thread Randy McAnally
On Tue, 22 Feb 2011 16:42:28 -0500, David Hubbard wrote I was wondering if anyone has a howto floating around on the step by step setup of having an internal bgp peer for sending quick updates to border routers to null route sources of undesirable traffic? I've seen it discussed on nanog from

Re: Howto for BGP black holing/null routing

2011-02-23 Thread Rafael Rodriguez
Team Cymru has some really good examples on how to configure something similar (utilizing their BOGON feed). http://www.team-cymru.org/Services/Bogons/bgp.html Scroll down to AUTOMATICALLY FILTERING BOGONS for IOS, JUNOS, etc examples On Tue, Feb 22, 2011 at 4:42 PM, David Hubbard

Re: Howto for BGP black holing/null routing

2011-02-23 Thread Joel Jaeggli
On 2/22/11 1:42 PM, David Hubbard wrote: I was wondering if anyone has a howto floating around on the step by step setup of having an internal bgp peer for sending quick updates to border routers to null route sources of undesirable traffic? I've seen it discussed on nanog from time to time,

Howto for BGP black holing/null routing

2011-02-22 Thread David Hubbard
I was wondering if anyone has a howto floating around on the step by step setup of having an internal bgp peer for sending quick updates to border routers to null route sources of undesirable traffic? I've seen it discussed on nanog from time to time, typically suggesting using Zebra, but could

Re: Howto for BGP black holing/null routing

2011-02-22 Thread Łukasz Bromirski
On 2011-02-22 22:42, David Hubbard wrote: I was wondering if anyone has a howto floating around on the step by step setup of having an internal bgp peer for sending quick updates to border routers to null route sources of undesirable traffic? I've seen it discussed on nanog from time to time,

Re: Howto for BGP black holing/null routing

2011-02-22 Thread Jack Carrozzo
Maybe I read your question wrong, but null-routing things at your border is often not very useful if the traffic is flooding your transit links. Most transits publish their community lists - you just need to tag the prefix you want to blackhole with the right community. See example from HE:

Re: Howto for BGP black holing/null routing

2011-02-22 Thread Jared Mauch
Also: http://docs.as701.net/tmp/CustomerBlackhole.txt Remember to set eBGP multihop on sessions for the next-hop rewrite capability :) - Jared On Feb 22, 2011, at 4:54 PM, Łukasz Bromirski wrote: On 2011-02-22 22:42, David Hubbard wrote: I was wondering if anyone has a howto floating around

Re: Howto for BGP black holing/null routing

2011-02-22 Thread Christopher Morrow
2011/2/22 Jared Mauch ja...@puck.nether.net: Also: http://docs.as701.net/tmp/CustomerBlackhole.txt Remember to set eBGP multihop on sessions for the next-hop rewrite capability :) oh hey, I was looking for that! :) (I'll try to re-setup the www.secsup.org links tonight) ... this is a 'how

Re: Howto for BGP black holing/null routing

2011-02-22 Thread Dobbins, Roland
On Feb 23, 2011, at 5:42 AM, David Hubbard wrote: I've seen it discussed on nanog from time to time, typically suggesting using Zebra, but could not search up a link on a step by step. https://files.me.com/roland.dobbins/dweagy

Re: Howto for BGP black holing/null routing

2011-02-22 Thread Jon Lewis
On Tue, 22 Feb 2011, David Hubbard wrote: I was wondering if anyone has a howto floating around on the step by step setup of having an internal bgp peer for sending quick updates to border routers to null route sources of undesirable traffic? I've seen it discussed on nanog from time to time,