Filter on IXP

[patrick at ianai.net (Patrick W. Gilmore)]

On Feb 28, 2014, at 11:52 , Nick Hilliard <nick at foobar.org> wrote:
> On 28/02/2014 15:42, J?r?me Nicolle wrote:

>> Instead, IXPs _could_ enforce BCP38 too. Mapping the route-server's
>> received routes to ingress _and_ egress ACLs on IXP ports would mitigate
>> the role of BCP38 offenders within member ports. It's almost like uRPF
>> in an intelligent and useable form.
> 
> this will break horribly as soon as you have an IXP member which provides
> transit to other multihomed networks.

Or to anyone who doesn't announce their full downstream table to the route servers. Or to people who don't use route servers. Or to someone who does traffic engineering. Or ....

-- 
TTFN,
patrick