[c-nsp] BGP DFZ convergence time - FIB programming

[adamv0025 at netconsultings.com]

> From: Mark Tinka [mailto:mark.tinka at seacom.mu]
> Sent: Saturday, October 13, 2018 5:38 PM
> 
> On 13/Oct/18 18:36, Mark Tinka wrote:
> 
> 
> We don't perform any ingress iBGP policy for RTBH anywhere in the network.
> 
> Spoke too soon... with peering routers being the exception, as we tightly
> control which routes are made available to the peering routers; we don't
> hold a full table there.
> 
Ha, same here, twofold actually, 

1) Started using flowspec for dealing with DDoS once inside the network -much better granularity, no need to throw customer over the board instantly. And the RTBH and Scrubbing is used to protect peering links -but that's not related to iBGP session ingress policies discussion.

2) Actually using ingress/egress iBGP filtering all over the place due to multi-planar RR infrastructure I created, -so Robert that's another use case for you :)    

adam

netconsultings.com
::carrier-class solutions for the telecommunications industry::