Skip to Content.
Sympa Menu

netsec-sig - Re: [Security-WG] Seeking advice on BCP for ROAs....

Subject: Internet2 Network Security SIG

List archive

Re: [Security-WG] Seeking advice on BCP for ROAs....


Chronological Thread 
    < Chronological >      < Thread >
  • From: John Kristoff <>
  • To: "" <>
  • Cc: "" <>, Jon Worley <>
  • Subject: Re: [Security-WG] Seeking advice on BCP for ROAs....
  • Date: Wed, 15 May 2019 09:20:12 -0500
On Wed, 15 May 2019 13:58:26 +0000
"" <> wrote:

> Should IU's ROAs include one that associates 129.79.0.0/16 with AS87
> and a second ROA that includes 129.79.0.0/16 - 24 associated with
> AS393676?

When a prefix is moved to the DDoS mitigation provider, can you just
create a specific /24 (or whatever) ROA with their origin at that time?

Your suggestion above will certainly works, but there seems to be a
consensus, not unreasonable, that "loose" ROAs are best avoided if
possible.

John

Archive powered by MHonArc 2.6.19.

Top of Page