North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: UUNet Offer New Protection Against DDoS
On Mar 3, 2004, at 4:47 PM, Stephen J. Wilcox wrote: I'm puzzled by one aspect on the implementation.. how to build your customerMCI handles this by only filtering on prefix, not length. Well, allowing you to only announce up to your length, not shorter, but longer is allowed. Now, I could do as per the website at secsup.org which means we have a route-mapIt's not hard. I think the old UUNET just used standard ACLs (1->99). :) But with prefix filters, you can set gt & lt prefix lengths on the filters trivially. Of course, your customers can then deaggregate to their hearts content. If they do, you should hunt them down and LART them. But it is useful for some things, especially when combined with no_export, the black-hole communities, or other communities. -- TTFN, patrick
|