North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Who does source address validation? (was Re: what's that smell?)

  • From: Valdis.Kletnieks
  • Date: Tue Oct 08 16:43:57 2002

On Tue, 08 Oct 2002 22:06:12 +0200, Iljitsch van Beijnum said:

> Because if 20% of all people generate this crap (which is a huge number)
> it must be 90% of their traffic to get at 18%. How can someone generate so
> much useless traffic and keep doing it, too?

How much you want to bet that *all* the internal backbone traffic from these
sites is pouring out into the Internet, and they've had to upgrade from a T1 to
a DS3 and are looking at a OC3, and the service provider is keeping their mouth
shut because they can just catch an OC3's worth of packets and drop most of
them on the floor (because they don't have a route to the 1918 destination
address - only the random stuff with actual valid destinations like a root
nameserver gets forwarded).  Oh, and since 90% of their traffic is dropped on
the floor, they can provision an OC3 to the customer and still only need to
provision a DS3 upstream.  If 20% of your customers do this, you can just label
it "cash cow".. ;)

If you thought there was disincentive for people selling transit to filter,
this is even worse... ;)
-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech

Attachment: pgp00016.pgp
Description: PGP signature