<div dir="ltr">Just to bring more complicated things to the table...<br><br>And what about using the AS-SET object declared in PeeringDB?<br><br>The more usual (and relaxed) syntax is AS65123::AS-CUSTOMERS, or AS-JOHNDOENET<br>But the mor strict (and more correct, in my opinion) syntax is RADB::
AS65123::AS-CUSTOMERS or RADB::AS-JOHNDOENET<br><br>On the first syntax the ASN operator is saying to the world:<br>"The AS-SET that defines the cone of prefixes that can be announced by our network is this one."<br><br>On the first syntax the ASN operator is saying to the world:<br>"The AS-SET that defines the cone of prefixes that can be announced by our network is this one. And you should be considered true just the information in the RADB IRR."<br><br><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Em seg., 3 de jul. de 2023 às 19:24, Nick Hilliard via ixpmanager <<a href="mailto:ixpmanager@inex.ie">ixpmanager@inex.ie</a>> escreveu:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div><span>Paul Emmons wrote on 03/07/2023 22:56:</span><br>
<blockquote type="cite">Agreed, but
here is a deeper issue that is happening that I can show
using actual participants. Member uses ARIN as their IRR - very high
quality IRR and that member doesn't have any down streams. Member B
provides downstream to A but Member B just uses their AUTNUM and not an
AS-SET for Member A. Member B has their AS-SET as RADB (not the worst
but they do refuse to remove proxy routes that don't exist). Member A's
prefixes are filtered out of Member B's announcements in the route
servers. (Member A still has connectivity on the exchange. But what
happens if Member A's IX circuit goes down or if Member A isn't on the
exchange?
<br>
<br>
It is probably more of an issue of training member B not to use AUTNUMs
for down streams. Maybe some form of reporting would be helpful. (I
always start at the IX looking glass).
<br>
</blockquote>
<br>
yep, getting this sort of thing right takes work and engagement with IX
participants. Birdseye is designed to make it easy to catch this sort
of misconfig and it's a good idea to take a peek through what prefixes
are being rejected to see if the irrdb policy can be tweaked to make it
better.<br>
<br>
Also, pulling data from several sources is troublesome. At least IRRD4
means it's no longer non-deterministic, although there are still plenty
of failure modes.<br>
<br>
Nick<br>
</div>
_______________________________________________<br>
INEX IXP Manager mailing list<br>
<a href="mailto:ixpmanager@inex.ie" target="_blank">ixpmanager@inex.ie</a><br>
Unsubscribe or change options here: <a href="https://www.inex.ie/mailman/listinfo/ixpmanager" rel="noreferrer" target="_blank">https://www.inex.ie/mailman/listinfo/ixpmanager</a><br>
</blockquote></div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature"><div dir="ltr">Douglas Fernando Fischer<br>Engº de Controle e Automação<br><div style="padding:0px;margin-left:0px;margin-top:0px;overflow:hidden;color:black;text-align:left;line-height:130%;font-family:"courier new",monospace"></div></div></div>