Re: Smaller than a /24 for BGP?

2023-01-25 Thread Lars Prehn
We performed some high-level analyses on these hyper-specific prefixes about a year ago and pushed some insights into a blog post [1] and a paper [2]. While not many ASes redistribute these prefixes, some accept and use them for their internal routing (e.g., NTT's IPv4 filtering policy [3]).

Detecting, mitigating, and preventing distributed large-scale prefix de-aggregation attacks

2022-10-20 Thread Lars Prehn
Dear NANOG, Our apologies to those who received this message via multiple channels. My colleagues and I recently revisited the topic of prefix de-aggregation attacks. We believe that the current IPv6 allocation policies combined with the ever-growing number of interconnection opportunities ma

Re: Announcement of Experiments

2022-05-02 Thread Lars Prehn
ur ASNs is suddenly announcing space that is not ours , and that is coming from a network that isn't under our control. On Mon, May 2, 2022 at 2:07 PM Lars Prehn <[redacted]> wrote: Short Disclaimer: I frequently use the PEERING testbed myself, so I'm genuinely interested in where and

Re: Announcement of Experiments

2022-05-02 Thread Lars Prehn
Short Disclaimer: I frequently use the PEERING testbed myself, so I'm genuinely interested in where and why people draw the boundary of what's fine and what's not. Iirc., the route collectors see a (drastically varying) number of poisoned routes (assuming everything within a loop is poisoning)

Re: Setting sensible max-prefix limits

2021-08-18 Thread Lars Prehn
Okay, so some automated PeeringDB-based approach seems to be the preferred road. ~30% and ~40% of IPv4 and IPv6 PeeringDB prefix count recommendations are 0. How do you treat those cases? Does it also boils down to a simple "we don't peer with them" ? Best regards, Lars On 18.08.21 12:31,

Re: Setting sensible max-prefix limits

2021-08-18 Thread Lars Prehn
On 18.08.21 12:36, Saku Ytti wrote: On Wed, 18 Aug 2021 at 12:36, Lars Prehn wrote: As I understand by now, it is highly recommended to set a max-prefix limit for peering sessions. Yet, I can hardly find any recommendations on how to arrive at a sensible limit. You are missing two important

Setting sensible max-prefix limits

2021-08-18 Thread Lars Prehn
As I understand by now, it is highly recommended to set a max-prefix limit for peering sessions. Yet, I can hardly find any recommendations on how to arrive at a sensible limit. I guess for long standing peers one could just eyeball it, e.g., current prefix count + some safety margin. How does

Re: IANA 6to4 assignment status

2021-08-02 Thread Lars Prehn
stry. Thanks in advance, Lars [1] https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml On 02.08.21 16:56, Valdis Klētnieks wrote: On Mon, 02 Aug 2021 11:57:54 +0200, Lars Prehn said: Is there a reason why the status of 2002::/16 in IANA's IPv6 u

IANA 6to4 assignment status

2021-08-02 Thread Lars Prehn
Hi, Is there a reason why the status of 2002::/16 in IANA's IPv6 unicast assignments list [1] is ALLOCATED (with '6to4' as designation and the note field indicating reservation) rather than RESERVED? Best regards, Lars [1] https://www.iana.org/assignments/ipv6-unicast-address-assignments/i

Historic IRR/RADB snapshots?

2021-02-24 Thread Lars Prehn
Does anybody have (somewhat frequent, e.g., monthly) snapshots of the various IRR databases lying around? Any snapshot since 2010 would be helpful! Best regards, Lars

Re: ROV++: Improved Deployable Defense against BGP Hijacking

2020-12-09 Thread Lars Prehn
Hi Amir, Neither providing an abstract nor the high-level takeaways of your work is a rather blunt way to promote your paper. I have a bunch of comments and questions, but I'm only a student so take them with a grain of salt. Regarding ROV++ v1: Let's modify your example in Figure 2a slightly

Re: non-rate limited, automatable Looking Glasses?

2020-07-19 Thread Lars Prehn
r that provides the BGP feed. Regards Baldur lør. 18. jul. 2020 23.34 skrev Lars Prehn <mailto:lpr...@mpi-inf.mpg.de>>: Hi everyone, In the next couple of months, I want to compare data plane and control plane measurements on a larger scale. In particular, I'm looki

Re: non-rate limited, automatable Looking Glasses?

2020-07-19 Thread Lars Prehn
have SSH access to run any commands you want and there is an API to find the probes if you want to automate it all. I encourage anyone and everyone to join. The more networks the better! Brendan On Sun, 19 Jul 2020, 7:36 am Lars Prehn, <mailto:lpr...@mpi-inf.mpg.de>> wrote: Hi ev

Re: non-rate limited, automatable Looking Glasses?

2020-07-18 Thread Lars Prehn
find the probes if you want to automate it all. I encourage anyone and everyone to join. The more networks the better! Brendan On Sun, 19 Jul 2020, 7:36 am Lars Prehn, <mailto:lpr...@mpi-inf.mpg.de>> wrote: Hi everyone, In the next couple of months, I want to compare data pl

non-rate limited, automatable Looking Glasses?

2020-07-18 Thread Lars Prehn
Hi everyone, In the next couple of months, I want to compare data plane and control plane measurements on a larger scale. In particular, I'm looking for (publicly accessible) devices that receive BGP feeds and can perform a bunch of automated (paris) traceroutes. I currently do not have an exa

RDAP snapshots

2020-06-27 Thread Lars Prehn
Hi everyone, Is there a "fast" way to obtain a snapshot of the RDAP databases from each RIR (e.g., http://rdap.db.ripe.net/) for local use? I saw some presentations on proposals for RDAP monitoring, but couldn't find any working implementations. I want to run a massive amount of requests agai

Re: Route aggregation w/o AS-Sets

2020-04-15 Thread Lars Prehn
wrote: Don't user as-sets step one. Rpki does not understand how to express an as-sets' authorization. Why do you want to do this? On Mon, Apr 13, 2020, 13:34 Lars Prehn <mailto:lpr...@mpi-inf.mpg.de>> wrote: Hi everyone, how exactly do you aggregate routes? Wh

Route aggregation w/o AS-Sets

2020-04-13 Thread Lars Prehn
Hi everyone, how exactly do you aggregate routes? When do you add the AS_SET attribute, when do you omit it? How does the latter interplay with RPKI? Best regards, Lars

NTP for ASBRs?

2019-05-08 Thread Lars Prehn
Hi everyone, do you NTP sync your AS boundary routers? If so, what are incentives for doing so? Are there incentives, e.g. security considerations, not to do it? Best regards, Lars

Re: historical Bogon lists

2018-12-15 Thread Lars Prehn
in list just doesn't change that frequently. -mel via cell On Dec 15, 2018, at 1:30 AM, Lars Prehn wrote: Hi Mel, I already checked Archive.org - it holds two previous copies. lets you download each version of the list that archive.org noticed changed According to Archive.org's own Note

Re: historical Bogon lists

2018-12-15 Thread Lars Prehn
posted, ad you’ll get a history that lets you download each version of the list that archive.org noticed changed. In my experience, that is pretty comprehensive. -mel beckman On Dec 15, 2018, at 12:31 AM, Lars Prehn wrote: Hi everyone, In order to sanitize historical BGP data I would

historical Bogon lists

2018-12-15 Thread Lars Prehn
Hi everyone, In order to sanitize historical BGP data I would like to use historical Bogon lists. The CIDR report generates those lists on a daily basis (e.g. https://www.cidr-report.org/bogons/freespace-dec.txt for prefixes) but, as far as I know, it does not keep a history of those files - i

PCH BGP Collector Data - Contact

2018-12-13 Thread Lars Prehn
Hi everyone, I'm planning to download a significant amount of PCH's available MRT data. Is there anyone that could forward me (maybe off-list) contact information for one of the current maintainers? Thanks in advance! Best regards, Lars

Re: Internet diameter?

2018-11-26 Thread Lars Prehn
Hi, Does anybody have more or less recent data on the average, median and maximum diameter (ip hop count) of the Internet? First, to give some hints regarding the initial question: A year ago I did some analysis based on Caida's routed /24 topology data set (https://www.caida.org/data/activ

Re: Internet topology resources

2018-04-26 Thread Lars Prehn
- Original Message On Apr 26, 2018, 4:46 PM, Lars Prehn < lpr...@inet.tu-berlin.de> wrote: Hi all, two quick questions: Is there any way to retrieve BGP data (e.g. table dumps, updates, ...) such that i.) the data is not already available in the RIPE RIS,

Internet topology resources

2018-04-26 Thread Lars Prehn
Hi all, two quick questions: Is there any way to retrieve BGP data (e.g. table dumps, updates, ...) such that i.) the data is not already available in the RIPE RIS, Routeviews, PCH, Isolario, or BGPmon projects and ii.) it is not necessary to query a Looking Glass to death (e.g. get all neigh