NTAC Peering Working Group

[Bill Owens <>]

I haven’t digested this article, which spends a lot more time on RPKI than on IRR, but it’s certainly good reading: http://www.circleid.com/posts/20181016_securing_the_routing_system_at_nanog_74/

Bill.

---

From: <> on behalf of David Farmer <>
Sent: Saturday, October 6, 2018 12:04:47 PM
To:
Subject: IRR Filtering

 

Just a heads up from NANOG this week. There is a big push across the Internet industry to clean up routing, to eliminate route leaks and hijacking, with filtering based on IRR objects and filtering of RPKI invalid routes. 

So, If you don't already have IRR objects or they are not up to date you might want to fix that soon. This is a handy tool to check the consistency of your IRR objects.

http://irrexplorer.nlnog.net/

Fastly, a medium sized CDN, already filters based on IRR objects, and HE, a backbone and data center provider, has recently started filtering.

https://www.fastly.com/peering

http://routing.he.net/algorithm.html

Also at NANOG, it was announced by Google that they plan to begin filtering routes based IRR objects early next year.  See slide 114 of the following;

https://pc.nanog.org/static/published/meetings/NANOG74/1760/20181003_Tzvetanov_Security_Track_Bgp_v1.pdf

There is lots of other good stuff in the deck, but the fact that Google plans to start filtering based on IRR objects is really BIG news.

I'm sure many other of Internet2's peers are either filtering or will soon begin filtering based on IRR objects, also many Internet Exchange Route Servers are starting to filter based on IRR objects and filter RPI invalids.

Thanks

--

===============================================
David Farmer              
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota  
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================