Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-12 Thread Max Tulyev
Hi Martin, well, not only as-set and route. Assuming only legitimate owner of inetnum and aut-num have passwords for mntner from that objects can modify their RIPE DB objects and can create routes. So to create a route object, you have to have access for inetnum and aut-num objects (that can be

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Jared Mauch
On Thu, Feb 04, 2016 at 05:52:54PM +0100, Randy Bush wrote: > >>> We record the customer ASN and the AS-SET for each AFI (v4|v6) and > >>> expand these and push updated lists to devices daily or on demand > >>> based on customer need. > >> > >> do you trust the state of the acl on the router and o

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Paul Thornton
On 04/02/2016 11:14, Martin T wrote: Hi, am I correct that ISPs (in RIPE region), who update their BGP prefix filters automatically, ask their IP transit customer or peering partner to provide their "route"/"route6" object(s) or "as-set" object in order to find all the prefixes which they should

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Randy Bush
>>> We record the customer ASN and the AS-SET for each AFI (v4|v6) and >>> expand these and push updated lists to devices daily or on demand >>> based on customer need. >> >> do you trust the state of the acl on the router and only send a delta, >> or do you send the whole acl? > > We send the wh

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Randy Bush
> We record the customer ASN and the AS-SET for each AFI (v4|v6) and > expand these and push updated lists to devices daily or on demand > based on customer need. do you trust the state of the acl on the router and only send a delta, or do you send the whole acl? randy

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Jared Mauch
On Thu, Feb 04, 2016 at 05:40:36PM +0100, Randy Bush wrote: > > We record the customer ASN and the AS-SET for each AFI (v4|v6) and > > expand these and push updated lists to devices daily or on demand > > based on customer need. > > do you trust the state of the acl on the router and only send a d

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Jared Mauch
> On Feb 4, 2016, at 6:58 AM, Henrik Thostrup Jensen wrote: > >> In addition, in case of "as-set", an ISP needs to recursively find all the >> AS numbers from "members" attributes because "as-set" can include other >> "as-sets"? > > Some irrd servers, can expand this automatically (I think).

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Pavel Odintsov
Hello! You could check awesome project for this purposes: http://www.stableit.ru/2015/06/generate-bgp-filters-with-bgpq3.html It's authored by Russian carrier RETN.net. On Thu, Feb 4, 2016 at 2:58 PM, Henrik Thostrup Jensen wrote: > Hi Martin > > On Thu, 4 Feb 2016, Martin T wrote: > >> am I cor

Re: algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Henrik Thostrup Jensen
Hi Martin On Thu, 4 Feb 2016, Martin T wrote: am I correct that ISPs (in RIPE region), who update their BGP prefix filters automatically, ask their IP transit customer or peering partner to provide their "route"/"route6" object(s) or "as-set" object in order to find all the prefixes which they

algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters

2016-02-04 Thread Martin T
Hi, am I correct that ISPs (in RIPE region), who update their BGP prefix filters automatically, ask their IP transit customer or peering partner to provide their "route"/"route6" object(s) or "as-set" object in order to find all the prefixes which they should accept? If the IP transit customer or