(Sorry for the top-post...I'm mobile atm.) My understanding is that core network operators filter ASs for which they don't have a contract for transit. I.e, if I were to get my own PI space, I'd have to pay tier 1 networks (or pay someone to ride on *their* contract) for a contract to have packets destined for my AS to be able to reach me across their network.
ZZ On Feb 18, 2012 1:04 PM, "Pandu Poluan" <pa...@poluan.info> wrote: > On Sat, Feb 18, 2012 at 23:18, Michael Mol <mike...@gmail.com> wrote: > > > > ---- >8 snippage > > > > > And it's not so easy to take the Internet down with injected BGP > > routes any more, either; most network operators apply some sort of > > filtering. > > > > Yes, there *are* filters against injecting BGP from non-trusted sources. > > But if the government somehow controls a Network Service Provider > (NSP, the maintainers of Internet backbones), they can easily poison > the BGP updates. Routers connected to the NSP will happily accept the > poisoned updates since they rely on the NSP to provide "big picture" > traffic management. > > Rgds, > -- > FdS Pandu E Poluan > ~ IT Optimizer ~ > > • LOPSA Member #15248 > • Blog : http://pepoluan.tumblr.com > • Linked-In : http://id.linkedin.com/in/pepoluan > >
