summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authoruvok cheetah2024-06-26 19:11:44 +0200
committeruvok cheetah2024-06-26 19:11:44 +0200
commitbe804f06dd8e064c3fc0658c570a53a53cf5b20c (patch)
treea20e2f1f8b476429210b9d44d77a3c7d2409ca9f
parent2b8a7c5e4e3d88727a6837a54bd775bba392ba78 (diff)
Add learning to BGP
-rw-r--r--_posts/2024-03-17-further-learnings-from-running-my-as.md10
1 files changed, 9 insertions, 1 deletions
diff --git a/_posts/2024-03-17-further-learnings-from-running-my-as.md b/_posts/2024-03-17-further-learnings-from-running-my-as.md
index 416d4e2..172168e 100644
--- a/_posts/2024-03-17-further-learnings-from-running-my-as.md
+++ b/_posts/2024-03-17-further-learnings-from-running-my-as.md
@@ -2,7 +2,7 @@
layout: post
title: Further learnings from running my AS
date: 2024-03-17 14:42 +0100
-last_modified_at: 2024-04-29 18:55 +02:00
+last_modified_at: 2024-06-26 19:08 +02:00
lang: en
categories: ["tech"]
---
@@ -106,3 +106,11 @@ Futher info:
Only I wondered why *on my other VPS* suddenly a huge amount of routes preferred
to go via IBGP. I facepalmed when I realized what I did. (BGP local pref attribute
is sent via IBGP sessions).
+
+**Update 2024-06-26**
+
+- Ooops! Again. I should not accept *any* default route if I want to do filtering.
+ Assuming my upstream/transit *doesn't* do proper RPKI/bogon filtering.
+ Instead, I need to add a default blackhole.
+ (The filtered routes will not be in my routing table, and if I don't want to route
+ to them, I need to prevent the kernel from using the default upstream route).