On Mar 19, 2010, at 08:47 , Arnold Nipper wrote:
On 19.03.2010 08:10 Wolfgang Hennerbichler wrote
... checks if the as-path is valid ...
you really do that? We only do something like
case bgp_path.last { 13238: if pref_AS13238() then accept; 43247: if pref_AS43247() then accept; }
we filter on prefixes, but we only mark them good or "not in RIPE". A customer can select in the webinterface if he would like to receive only good routes, all routes or he can do a per-peer selection. what I meant by checking the as-path was if the peer-as was in the as-path: if ! (bgp_path ~ [= 1120 * =]) then reject;
where pref_ASyyyy() simply matches against all prefixes found in RADB for AS yyyyy.
our members decided to not filter on RADB but RIPE and rather use the solution above instead of dropping prefixes. Out of curiosity: How often do you rebuild your filters, and if you do are you clearing the bgp sessions (in bird-speak reloading the protocols)?
Best regards, Arnold
cu soon, Wolfgang
-- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold@nipper.de phone: +49 6224 9259 299 mobile: +49 172 2650958 fax: +49 6224 9259 333
-- www.vix.at | www.aco.net wh@univie.ac.at | WH844-RIPE Vienna University Computer Center