On 10/30/20 9:26 PM, Rubens Kuhl wrote:
> 1 - You should worry a little, but not much. Filters allowing unwanted
> announcements might be created using these erroneous IRR records, but
> they won't do any damage by themselves. An actual wrong BGP
> announcement is required for any damage to happen, and even without
> those IRR records, a wrong announcement will cause some havoc since
> not everyone builds filters based on IRR and not everyone runs RPKI
> validation.

I've had problems where people who build filters on IRR will build their 
filters SOLELY based on IRR.  That is, they are not permissive and will assume 
that, if there is an IRR object present for a prefix, that ONLY the 
announcements matching that object should be accepted.  This can lead to severe 
reachability issues if not corrected.
-- 
Brandon Martin

Reply via email to