Internet2 Network Security SIG

[Michael H Lambert <>]

> On 6 Nov 2017, at 10:54, David Farmer 
> <>
>  wrote:
> 
> So a question, how do we communicate this going forward as we interact with 
> more and more people? I'm worried some will just see this as an effort to 
> apply a traffic security policy on the Internet2 backbone. 

I think the primary targets/victims/beneficiaries of this process should be 
the connectors.  To me, it makes much more sense for them to be filtering 
their members on ingress, especially since BCP38 does tend to crop up in 
various NSF solicitations.  If Internet2 does the filtering, it can hide 
these downstream issues.  It is appropriate for Internet2 to identify 
"offending" traffic, but once it has been identified, the connector should be 
encouraged/cajoled/shamed to fix the problem.

International peers are another matter.  One would hope that they would have 
similar policies.

Michael