NTAC Peering Working Group

[Dale Finkelson <>]

Dale Finkelson
Internet2

office: +1-734-352-4958 | mobile: +1-402-304-0548

Begin forwarded message:

From: Steven Wallace <>

Subject: Re: WG meeting 4:00 PM 4/18/17

Date: April 18, 2017 at 4:04:25 PM EDT

To: Dale Finkelson <>, "" <>

On Apr 18, 2017, at 7:26 AM, Dale Finkelson <> wrote:

To join the Meeting:

https://bluejeans.com/239793292

To join via Browser:

https://bluejeans.com/239793292/browser

To join with Lync:

https://bluejeans.com/239793292/lync

To join via Cisco Jabber Video:

https://bluejeans.com/239793292/jabber

To join via Room System:

Video Conferencing System: bjn.vc -or-199.48.152.152

Meeting ID : 239793292

To join via phone :

1)  Dial: 

+1.408.740.7256 

+1.888.240.2560 

+1.408.317.9253

(see all numbers - http://bluejeans.com/numbers)

2)  Enter Conference ID : 239793292

NTAC Peering and Routing Working group
4/18/17, 4:00 EDT 

1.  Agenda Bash

2. Update on peering and TR-CPS/I2
3. Network Weather Update - Trends and Coming Events
4. RPKI Update
5. Network DDoS Scrubbung Service Update
6. How to deal with the lack of full routing table on TR-CPS (was: last of transit on TR-CPS)
7. AOB

From Jose’s notes this was the conversation from last meeting:

 How to deal with the lack of a full routing table on TR-CPS (was: lack of transit on TR-CPS)

• Issue Occurrence
• • only an issue with connectors/members that receive only a default route from their transit provided and more specifics from I2/TR-CPS
  • some times traffic gets blackholed  by TR-CPS or its peer
  • other times the peer will use their transit to deliver the traffic
• Possible solutions:
• • members/connectors get full table from their provider
  • TR-CPS gets full routes from a transit provider. Don’t advertise table to customers or advertise customer routes to provider
  • KanREN willing to provide full routes to TR-CPS as long as use is of limited occurrence and issues addressed with the I2 member. Possible issue is KanREN provider having filters in place which might drop the traffic from prefixes other than KanREN’s. Brad to check with his Executive on that possibility and verify with KanREN’s upstreams that prefixes are not being filtered.
• Discussion as to what are long term solutions
• • Is getting full routes from a transit provider (private or an I2 connector) a good idea? 
  • Could we use a local (to TR-CPS) host that somehow injects full routes but does not deliver the traffic and use it for identification of broken configuration
  • Are there any regulatory issues or precedence that we need to be aware of or figure out
  • Internet2 will discuss internally which option would work
  • Investigate what is the number of cases that occur for any given period in order to gauge the size of the problem.

Dale

Dale Finkelson
Internet2

office: +1-734-352-4958 | mobile: +1-402-304-0548

Attachment: DDoS connection to Zenedge.pdf
Description: DDoS connection to Zenedge.pdf