<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Nishal,</p>
<p>I appreciate your feedback and totally understand where you
coming from. But keep in mind that not all of us work in the
environment and have to face different challenges. There are valid
situations under which you might want to (selectively) disable
prefix filtering. Hence, my question.<br>
</p>
<p>BTW: As mentioned you can already turn off prefix and AS path
filtering altogether by unchecking "Apply IRRDB Filtering" on a
logical port.</p>
<p>Apologies for TOFU.<br>
</p>
<p>Cheers<br>
</p>
<div class="moz-cite-prefix">On 12/4/18 4:20 PM, Nishal Goburdhan
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:805046EF-CB29-45B6-8DF7-8D2E0B16469D@controlfreak.co.za">On
4 Dec 2018, at 9:53, Dennis J. 'JD' Bungart wrote:
<br>
<br>
<br>
<blockquote type="cite">Is there a way to disable prefix filtering
and leave as path filtering
<br>
in place using the UI?
<br>
</blockquote>
<br>
<br>
no doubt you know this already, but that’s a really dangerous
thing to do. i’d be loathe to see ixpmanager support a feature
that creates a false sense of security. as a user, and sometimes
assistant to get ixpmanager running at other ixps, if this option
_were_ to be available, i’d really like to see it not made visible
via the UI, because the temptation to “not prefix filter” to fix a
problem for a loud peer, is just too easy.
<br>
<br>
our story:
<br>
since we’ve migrated away from our (time-consuming) home-grown
filter set, which took into account “friendly mistakes/accidents”
by peers, and started using automated filtering based on IRR
objects (via ixpmanager), we’ve had a few peers grumble and moan
because now _they_ have to do the work of resolving IRR
mismatches. but overall, we think that’s a good thing; we work
with, and support them in doing that, and we even hold training
classes where we work through how to get this, and rpki done.
which we think is a good thing, because it all contributes to
building the community. and, of course, makes things just a
little bit safer.
<br>
<br>
—n.
<br>
_______________________________________________
<br>
INEX IXP Manager mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:ixpmanager@inex.ie">ixpmanager@inex.ie</a>
<br>
Unsubscribe or change options here:
<a class="moz-txt-link-freetext" href="https://www.inex.ie/mailman/listinfo/ixpmanager">https://www.inex.ie/mailman/listinfo/ixpmanager</a>
<br>
</blockquote>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title>signature</title>
<table>
<tbody>
<tr>
<td
style="padding-bottom:6px;text-align:left;font-size:12px;font-family:Arial,Sans-Serif;color:#666666"><b><span
style="font-size:13px;text-align:left;font-size:12px;font-family:Arial,Sans-Serif;color:#666666">Jan
D. "JD" Bungart</span></b><br>
Sr. Network & Systems Engineer<br>
</td>
</tr>
<tr>
<td
style="padding-bottom:6px;text-align:left;font-size:12px;font-family:Arial,Sans-Serif;color:#666666">
Email: <a moz-do-not-send="true"
href="mailto:jan.bungart@rise.ph">jan.bungart@rise.ph</a>
</td>
</tr>
<tr>
<td
style="padding-bottom:6px;text-align:left;font-size:12px;font-family:Arial,Sans-Serif;color:#666666">
<a href="http://rise.ph" target="_blank"><img
src="https://dl.dropboxusercontent.com/s/0agine65jvorj6g/Rise.png?dl=0"
moz-do-not-send="true" alt="" width="102" height="31"
border="0"></a> </td>
</tr>
<tr>
<td
style="padding-bottom:6px;text-align:left;font-size:12px;font-family:Arial,Sans-Serif;color:#666666">
6/F Crown 7 Business Center, Pope John Paul II Ave., Cebu
City 6000 <br>
9/F OPL Building, 100 C. Palanca St., Legazpi Village,
Makati City 1229 </td>
</tr>
<tr>
<td> <a href="http://fb.com/upgradetorise" target="_blank"><img
src="https://dl.dropboxusercontent.com/s/rge9yc0ormeoriz/facebook2.png?dl=0"
moz-do-not-send="true" alt="" width="16" height="16"
border="0"></a> <a
href="https://twitter.com/upgradetorise" target="_blank"><img
src="https://dl.dropboxusercontent.com/s/r2vozvvbulzeech/twitter2.png?dl=0"
moz-do-not-send="true" alt="" width="16" height="16"
border="0"></a> <a
href="https://www.linkedin.com/company/rise.ph"
target="_blank"><img
src="https://dl.dropboxusercontent.com/s/kj1rxndowsg96fy/linkedin2.png?dl=0"
moz-do-not-send="true" alt="" width="16" height="16"
border="0"></a></td>
</tr>
</tbody>
</table>
<p><br>
</p>
</div>
</body>
</html>