hank@ibm.net.il (Hank Nussbacher) writes:

Has anyone benchmarked how long it will take to resolve 50,000 bgp.in-addr's after a line hiccup or a "clear ip bgp *"? -Hank

I think an important point is that the implementation need not authenticate a path before it can use it. The vast majority of paths will not generate authentication failures. This policy does allow the temporary propagation of bad information, but the system can heal itself quickly. In the meantime, it means that everyone else gets reasonable convergence time. Tony