> From: Mark Tinka [mailto:[email protected]] > Sent: Saturday, October 13, 2018 5:38 PM > > On 13/Oct/18 18:36, Mark Tinka wrote: > > > We don't perform any ingress iBGP policy for RTBH anywhere in the network. > > Spoke too soon... with peering routers being the exception, as we tightly > control which routes are made available to the peering routers; we don't > hold a full table there. > Ha, same here, twofold actually,
1) Started using flowspec for dealing with DDoS once inside the network -much better granularity, no need to throw customer over the board instantly. And the RTBH and Scrubbing is used to protect peering links -but that's not related to iBGP session ingress policies discussion. 2) Actually using ingress/egress iBGP filtering all over the place due to multi-planar RR infrastructure I created, -so Robert that's another use case for you :) adam netconsultings.com ::carrier-class solutions for the telecommunications industry:: _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
