[c-nsp] prefixes in AS-Set

[Mark Tinka]

On Wednesday, August 03, 2011 07:23:46 PM Paul Stewart 
wrote:

> Yeah - we used to filter based on AS-SET at one time - we
> quickly maxxed out the available memory (for config
> storage) on Cisco 7600 platforms with Sup720-3BXL's
> doing this.  Now it's just max-prefix except our
> downstream customers where we specifically run filters
> to control what they announce to us.

Same here, although we also throw in AS_PATH filtering just 
to add a little more "safety".

> In a perfect world it would be all done via AS-SET but as
> Rob pointed out, not everyone keeps their data up to
> date unfortunately....

RPKI is now the way forward :-).

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20110803/c0dd3475/attachment-0001.pgp>