nanog mailing list archives

Re: "Defensive" BGP hijacking?


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Wed, 14 Sep 2016 16:59:14 -0400

On Wed, Sep 14, 2016 at 4:04 PM, Bryan Fields <Bryan () bryanfields net> wrote:

On 9/14/16 3:09 AM, Scott Weeks wrote:

Yes, RPKI.  That's what I was waiting for.  Now we can get to
a real discussion

Problem is, RPKI does not work for people with legacy blocks who will not
sign
a Legacy RSA.  ARIN doesn't own or have any say on how we use it, and we're


sure it does, move your registration to ripe.
<http://www.iepg.org/2016-04-03-ietf95/160403.iepg-transfer.pdf>

(this was also given at nanog or ripe or something, I couldn't remember
which was the right one)



sure as heck not going to sign a legally binding contract saying they do :)


don't have to... see preso.


I'm a bit ambivalent about BGP hijacking as a DDOS mitigation strategy.
Really there is no authority to say it's wrong.  If your peers are cool
with
it, and their peers are cool with it who's to say it's wrong?

--
Bryan Fields

727-409-1194 - Voice
http://bryanfields.net



Current thread: