Re: RTBH Support Across the Industry

[Bryton Herdes via NANOG <nanog () lists nanog org>]

Yes it is possible in JunOS and BIRD both, JunOS with some hackery. I’m
talking about formally supported knobs from the big vendors.

 If you’re interested in the feature request IDs I’ve submitted to
Juniper/HPE and Cisco I’m happy to provide those off-list, or you can see
them in my NANOG 98 slides in a few months.

--
Bryton Herdes
Principal Network Engineer
AS13335 - Cloudflare

On Tue, Jul 28, 2026 at 2:23 PM Saku Ytti <saku () ytti fi> wrote:

> On Tue, 28 Jul 2026 at 19:58, Bryton Herdes via NANOG
> <nanog () lists nanog org> wrote:
>
> > I’ve went back and forth on solutions for RTBH, and my latest opinion is
> > vendors should implement a separate knob to bypass maxLength checking for
> > specifically routes tagged as BLACKHOLE, and still validate origin AS via
> > RPKI-ROV. The risk of operators using such a knob in “a bad way” is
> known,
> > but we need this tool. Let’s talk about this more at NANOG 98.
>
> Yes. And this is possible today on Junos, as Martin Tonusoo shared in
> this list (not this thread) earlier.
>
> --
>   ++ytti
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/ACJURD2D7QT373GDL52GUOUYORCMMHTK/