6 ms·

any thoughts on requiring the creation of both outbound and inbound prefix lists when peering?

• throwaway2048 8y ago
  That would be completely unusable in large IX router meshes with hundreds or thousands of peers, constantly coming and going, all with their own lists of prefixes constantly changing.
• kbirkeland 8y ago
  Unless you're peering with another stub AS, creating a prefix list for both sides is almost impossible. The current recommendation[0] is to filter inbound on customer links using either IRR or ROA. Unfortunately neither of these are perfect. ROA can be replayed. There are a breadth of IRRs and I'm not quite sure of the validation levels each has. From my experience, they usually allow updates via email with either sender verification or password based authentication. [0] https://www.manrs.org/isps/guide/filtering/ https://www.manrs.org/isps/guide/filtering/