nanog mailing list archives

Re: Securing EBGP while getting rid of big IRR-based prefix-list-filters (Was: How long AS-PATH policies have you used)

From: Martin Tonusoo via NANOG <nanog () lists nanog org>
Date: Tue, 20 Oct 2026 16:54:29 +0300

Hi.

We've asked Nokia for two features
  1) multiple database RTR
  2) scalable non-regexp ASN origin check


Speaking of non-regex ASN checks, then an operator which ensures that
all AS numbers in the AS path are present in AS list may also be
useful. One example is here:
https://gist.github.com/tonusoo/5f418a2dff90a578daec5ffcc7043af8 For
example Junos already supports "as-path-origins" (returns True if
origin AS is in the list), "as-path-neighbors" (returns True if
leftmost AS is in the list) and "as-path-transits" (returns True if
any AS in AS path is in the list) so perhaps this feature could be
called "as-path-all" or something similar.


Martin
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/JRBGIDEKVMMG4PHUDIROXDZECP4FBQIW/

Current thread:

Re: Securing EBGP while getting rid of big IRR-based prefix-list-filters (Was: How long AS-PATH policies have you used) Martin Tonusoo via NANOG (Oct 08)
- Re: Securing EBGP while getting rid of big IRR-based prefix-list-filters (Was: How long AS-PATH policies have you used) Saku Ytti via NANOG (Oct 09)
  - Re: Securing EBGP while getting rid of big IRR-based prefix-list-filters (Was: How long AS-PATH policies have you used) Martin Tonusoo via NANOG (Oct 20)