Re: bgp protection

2007-11-06 Thread Randy Bush
at the end of nanog, i sent two messages. http://www.merit.edu/mail.archives/nanog/msg03741.html was a minor side note re 204/4 , about which we can all really do nothing for many years. it engendered the thread from hell. http://www.merit.edu/mail.archives/nanog/msg03735.html was regarding

bgp protection

2007-10-15 Thread Randy Bush
at nanog san jose, steve bellovin presented a simple proposal for bgp tcp/md5 re-keying. it is now rfc 4808 Key Change Strategies for TCP-MD5. this allows us to install and/or roll keys without disturbing the bgp session. and it is trivial for vendors to implement and for operators to use.