Re: CloudFlare issues?

[Mark Tinka]

On 24/Jun/19 16:11, Job Snijders wrote:

>
>     - deploy RPKI based BGP Origin validation (with invalid == reject)
>     - apply maximum prefix limits on all EBGP sessions
>     - ask your router vendor to comply with RFC 8212 ('default deny')
>     - turn off your 'BGP optimizers'

I cannot over-emphasize the above, especially the BGP optimizers.

Mark.