10 Apr
2014
10 Apr
'14
6:10 a.m.
On Thursday, April 10, 2014 09:18:34 AM Randy Bush wrote:
in our measurements, an rpki-based origin check is significantly faster than an acl of non-trivial length.
Ultimately, at some point in the future, it is not completely unreasonable to think that some operators could attempt control plane filtering based purely on RPKI-based origin and AS_PATH validation, without actually needing to configure prefix or AS_PATH lists :-). Wouldn't that be something... Mark.