On 30 Oct 2015 17:31, "Job Snijders" <[email protected]> wrote: > > On Fri, Oct 30, 2015 at 05:27:22PM +0000, Nick Hilliard wrote: > > On 30/10/2015 16:57, James Bensley wrote: > > > What do others have, what have I missed? > > > > the asn32 filter can be written as "_42........_", or perhaps "_42[0-9]{8}_" > > > > TBH, I'd question the value of filtering weird asns. What matters is > > filtering out weird prefixes. If you filter out weird ASNs, all you're > > doing is chewing up the CPU on your RP. > > My take: private ASNs have no place in the DFZ, I consider it healthy to > ignore any and all prefixes which have a private ASN anywhere in the > AS_PATH.
Agreed, my exact thoughts. > I'd also drop anything that has _23456_ in the AS_PATH if you know all > your equipment supports 4-byte ASNs > > Kind regards, > > Job Ah yes I'd forgotten that, well remembered, thanks! Cheers, James.
