On 28/03/2013 08:54, Lukasz Bromirski wrote: > uRPF is coming, both for IPv4 and IPv6. Unfortunately, it's still > in the future, not now.
Do you have a timescale for this in the feature roadmap? I'm aware you can use ACLs, but implementing these is much more time consuming and prone to operator error. This latest round of DDoS attacks is putting operators under a lot of pressure to implement bcp38 on their networks. It's relatively straightforward to do with strict urpf, but with ACLs, it requires more planning and work. This makes it a good deal more difficult to implement, which is harmful for the common good of the internet. I'm using ACLs at the moment, but would rip them out in an instant if I could. Nick _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/