Replies: 16 comments 25 replies
|
Seemingly typo
|
3 replies
|
Yeah, I was watching a talk about error reporting in Python the other day and it gives an idea of how tricky it is to identify what the person did wrong. I don't think we should go down this path. In this case specifically, as it's shown up a few times, if it is low-cost and low-complexity to replace |
|
I think this is just this one set of cases. |
|
If only this case then let's just flag as syntax error. |
Long
|
3 replies
|
What is this? I don't even... Only seems useful to filter prefixes that are less specific than a /8, but then we could just do |
|
Are these long |
|
No idea what the impact on checking is, but parsing seems fine right now. Note that we talked about these below in Jun. |
We could parse these. In fact, we did, and it took more than 2min just to parse this one entry. For now, I have implemented a skip for RPSL objects that are larger than 1MiB: ff5aba5. These are the only ones skipped: Details |
0 replies
|
This is OK, I was just joking that whitehats often try to break software to test for vulnerabilities, and thus this is why they created this JUMBO entry in the IRR. |
0 replies
Weird RPSL from parsing all IRRs I getIn Incomplete, such as comma-separated lists.Duplicated keys inside expressions.Keys inside other expressions.Keys inside expressions without `:`.Random garbage that seems like comments.Keyword typos.In Details |
3 replies
Doesn't seem like we can reasonably decide what the operators meant; when they list the AS it's unclear what prefixes are announced, and when they list the prefix it's unclear who they announce it to.
Maybe we could just remove the duplicates?
I vote for just dropping these.
Drop.
Couldn't find anything weird in this example, but possibly just drop as there's not much we can do in face of typos.
We should just ignore. It's like they're using a reserved keyword in a programming language. |
|
These are just syntax error I encounter in parsing. I don't plan to accommodate for them. |
Currently, I don't handle this case so it just goes into It is somewhat handled now. |
|
In |
3 replies
|
Is this legal RPSL? Also, thought on whether we should consider |
|
By https://www.rfc-editor.org/rfc/rfc2622#section-5.2, this is invalid because |
|
There is a list of DBs we are using in the README. I got them from IRR and did not check who use them. |
|
There are also many invalid AS Set names such as |
1 reply
|
This is related to the route-set-starting-with-AS above. It there a robust/reliable way for us to consider these misnames AS-sets and route-sets? If not, I vote for us to just flag them all as invalid. |
|
Yeah, I assume we'll have many of these. I think we should just report they
are not RPSL-compliant. (It's hard enough to figure out what the operator
meant when it is compliant, non-compliant entries seem hopeless.)
…On Thu, Jun 15, 2023 at 10:19 AM Steven Hé (Sīchàng) < ***@***.***> wrote:
In arin.db, we have many import and export in aut-num that obviously are
invalid RPSL:
Comma-separated lists.
aut-num: AS13728
as-name: AS13728-ALL
mnt-by: MNT-DPCOM-1
descr: 4200 Teal Rd
Petersburg MI 49270
United States
admin-c: ADMIN2005-ARIN
tech-c: TECHN949-ARIN
member-of: AS13728:AS-ALL
import: AS6939,AS53280,AS13728,AS174,AS7949,AS16509,AS63293
export: AS6939,AS53280,AS13728,AS174,AS7949,AS16509,AS63293
source: ARIN
created: 2020-08-10T18:50:16Z
last-modified: 2020-08-10T18:50:16Z
aut-num: AS13742
as-name: AN-NNTC
mnt-by: MNT-CENCO-1
descr: NNTC
JACKSON NE 68743
United States
admin-c: WOODB214-ARIN
tech-c: WOODB214-ARIN
member-of: AS-NNTC
import: AS32867
import: AS16851
export: AS32867
export: AS16851
source: ARIN
created: 2020-06-22T21:24:29Z
last-modified: 2020-06-22T21:24:29Z
aut-num: AS14935
as-name: AS14935
mnt-by: MNT-MNN-1
admin-c: JP3039-ARIN
tech-c: JP3039-ARIN
export: export: to AS-ANY AS14935:AS-ALL
source: ARIN
created: 2020-08-19T00:33:34Z
last-modified: 2020-08-19T00:33:34Z
descr: MNT-MNN-1 autnum AS14935
aut-num: AS15280
as-name: AS15280
descr: Host Leasing aut-num
member-of: AS-HOSTLEASING
import: AS19151
import: AS63221
export: AS15280
admin-c: IPADM328-ARIN
tech-c: IPADM328-ARIN
mnt-by: MNT-HLC-41
created: 2020-12-05T21:26:47Z
last-modified: 2020-12-05T21:26:47Z
source: ARIN
aut-num: AS30085
as-name: ISOHUNT
mnt-by: MNT-IWT-9
admin-c: ADMIN845-ARIN
tech-c: ADMIN845-ARIN
tech-c: ADP9-ARIN
export: 208.95.172.0/22
source: ARIN
created: 2020-10-18T04:43:37Z
last-modified: 2020-10-18T04:43:37Z
descr: MNT-IWT-9 autnum AS30085
Duplicated keys inside expressions.
aut-num: AS16616
as-name: CW1
mnt-by: MNT-CWL-47
admin-c: HAGER19-ARIN
tech-c: HAGER19-ARIN
export: export: to AS-ANY announce AS16616:AS-ALL
source: ARIN
created: 2020-06-30T18:01:35Z
last-modified: 2020-06-30T18:01:35Z
descr: MNT-CWL-47 autnum AS16616
aut-num: AS17049
as-name: MBOV-EXPORT
mnt-by: MNT-MBOV
descr: P.O. Box 575
Mannford OK 74044
United States
admin-c: ADMIN6635-ARIN
tech-c: RDW10-ARIN
member-of: AS-MBOV-AS1
export: export: to AS6939 announce AS-MBOV-AS1
export: export: to AS174 announce AS-MBOV-AS1
source: ARIN
created: 2020-06-30T22:00:21Z
last-modified: 2020-06-30T22:00:21Z
aut-num: AS17064
as-name: 17064
mnt-by: MNT-TISDI
descr: 1412 E Red River
Victoria TX 77901
United States
admin-c: DLC96-ARIN
tech-c: DLC96-ARIN
tech-c: NORTO41-ARIN
member-of: AS17064:AS-ALL
export: export: to AS-ANY announce AS17064:AS-ALL
mp-export: mp-export: afi any.unicast to AS-ANY announce AS17064:AS-ALL
source: ARIN
created: 2020-11-05T22:06:05Z
last-modified: 2020-11-05T22:06:05Z
aut-num: AS19264
as-name: TC-19264
mnt-by: MNT-TL-229
descr: 160 Colonial Drive
Lakewood NJ 08701
United States
admin-c: BENDE22-ARIN
tech-c: BENDE22-ARIN
export: export: to AS26549 announce AS19264:AS-ALL
export: export: to AS-ANY announce AS19264:AS-ALL
source: ARIN
created: 2020-06-25T18:31:15Z
last-modified: 2020-08-20T14:13:49Z
aut-num: AS26329
as-name: INSERVER
mnt-by: MNT-INSERV-3
descr: InServer Networks
admin-c: INSER-ARIN
tech-c: INSER-ARIN
import: import: from 54020 accept ANY
import: import: from 20473 accept ANY
import: import: from 10242 accept ANY
export: export: to AS54020 announce AS26329
export: export: to AS20473 announce AS26329
export: export: to AS10242 announce AS26329
source: ARIN
created: 2020-06-19T16:33:50Z
last-modified: 2020-06-19T16:33:50Z
Keys inside other expressions.
aut-num: AS21698
as-name: TURBONET
mnt-by: MNT-WT-349
admin-c: WEBBM24-ARIN
tech-c: JONES1829-ARIN
export: aut-num: AS21698
export: export: to AS-21698-UPSTREAM announce ANY
source: ARIN
created: 2020-06-12T20:15:47Z
last-modified: 2020-06-12T20:15:47Z
descr: MNT-WT-349 autnum AS21698
Keys inside expressions without `:`.
aut-num: AS23376
as-name: AS23376
import: import from AS174 accept ANY
import: import from AS3356 accept ANY
import: import from AS6461 accept ANY
import: import from AS6939 accept ANY
import: import from AS10956 accept ANY
import: import from AS11756 accept ANY
import: import from AS23532 accept ANY
import: import from AS393531 accept ANY
export: export to AS174 announce ANY
export: export to AS3356 announce ANY
export: export to AS6461 announce ANY
export: export to AS6939 announce ANY
export: export to AS23532 announce ANY
export: export to AS11756 announce ANY
mp-import: mp-import from AS174 accept ANY
mp-import: mp-import from AS3356 accept ANY
mp-import: mp-import from AS6461 accept ANY
mp-import: mp-import from AS6939 accept ANY
mp-import: mp-import from AS10956 accept ANY
mp-import: mp-import from AS11756 accept ANY
mp-import: mp-import from AS23532 accept ANY
mp-import: mp-import from AS393531 accept ANY
mp-export: mp-export to AS174 announce ANY
mp-export: mp-export to AS3356 announce ANY
mp-export: mp-export to AS6461 announce ANY
mp-export: mp-export to AS6939 announce ANY
mp-export: mp-export to AS23532 announce ANY
mp-export: mp-export to AS11756 announce ANY
descr: MNT-VFL-79 autnum AS23376
admin-c: ENADM-ARIN
tech-c: ENENG-ARIN
tech-c: TVA33-ARIN
mnt-by: MNT-VFL-79
created: 2020-11-12T21:32:26Z
last-modified: 2021-03-31T15:52:40Z
source: ARIN
—
Reply to this email directly, view it on GitHub
<#6 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AACPO57ANI34EUPFR6GMMODXLK2RXANCNFSM6AAAAAAXZ4LHNE>
.
You are receiving this because you commented.Message ID:
***@***.***>
|
0 replies
Weird
|
2 replies
|
But I thought we had agreed that |
|
It is handled as |
|
AS Path regex is used in less than 2923 times, making it < 0.36%. |
0 replies
Less than 20 instances of such usage is found.$ cat regex_usage.txt | rg '\[[^]]*-[^]]*]'
arin.db:import: from AS-AS33274-MICE-RS-PEERS action pref=115; accept <^PeerAS+$> OR <^PeerAS+ [AS1 - AS64495]~+$> OR <^PeerAS+ [AS131072 - AS4199999999]~+$>
arin.db:import: from AS-AS33274-IX-PEERS action pref=115; accept <^PeerAS+$> OR <^PeerAS+ [AS1 - AS64495]~+$> OR <^PeerAS+ [AS131072 - AS4199999999]~+$>
radb.db: announce community.contains(7575:1000, 7575:1001, 7575:1002) OR <[AS7570:AS-RNO AS7570:AS-MEMBER AS7570:AS-CUSTOMER]$>;
ripe.db:filter: <[AS64512-AS65534]>
ripe.db: <[AS64512-AS65534]>
ripe.db: <[AS64512-AS65534]>
ripe.db: <[AS64512-AS65534]>
ripe.db: <[AS64512-AS65534]>
ripe.db: <[AS64512-AS65534]>
ripe.db:filter: { 0.0.0.0/8^+ , 10.0.0.0/8^+ , 100.64.0.0/10^+ , 127.0.0.0/8^+ , 169.254.0.0/16^+
, 172.16.0.0/12^+ , 192.0.0.0/24^+ , 192.0.2.0/24^+ , 192.168.0.0/16^+ , 198.18.0.0/15^+ ,
198.51.100.0/24^+ , 203.0.113.0/24^+ , 224.0.0.0/3^+ } AND <[AS64496-AS65535]>
AND <[AS65536-AS65551]>
ripe.db:mp-filter: { ::/3^+, 2001:db8::/32^+,2002::/16^+,2d00::/8^+, 2e00::/7^+, 3000::/4^+, 4000::/3^+, 6000::/3^+, 8000::/3^+, a000::/3^+, c000::/3^+, e000::/3
^+ } AND <[AS64496-AS65535]> AND <[AS65536-AS65551]>
ripe.db: <[AS64512-AS65534]>
ripe.db: <[AS64512-AS65534]>
ripe.db:mp-filter: { 0.0.0.0/0, 10.0.0.0/8^+, 127.0.0.0/8^+, 169.254.0.0/16^+, 172.16.0.0/12^+, 192.0.2.0/24^+, 192.168.0.0/16^+, 198.18.0.0/15^+, 0.0.0.0/0^25-3
2 } AND { 2001:db8::/32^+, 2002::/16^-, 0000::/8^+, fe00::/9^+, ff00::/8^+, 0::/0^49-128 } AND <[AS64512-AS65534]>
ripe.db:mp-filter: { 10.0.0.0/8^+, 127.0.0.0/8^+, 169.254.0.0/16^+, 172.16.0.0/12^+, 192.0.2.0/24^+, 192.88.99.0/24^+, 192.168.0.0/16^+, 198.18.0.0/15^+, 0.0.0.0
/0^25-32 } AND { 2001:db8::/32^+, 2002::/16^-, 0000::/8^+, fe00::/9^+, ff00::/8^+, 0::/0^49-128 } AND <[AS64512-AS65534]>
ripe.db:mp-filter: { 10.0.0.0/8^+, 127.0.0.0/8^+, 169.254.0.0/16^+, 172.16.0.0/12^+, 192.0.2.0/24^+, 192.168.0.0/16^+, 0.0.0.0/0^25-32, 95.130.232.0/21^+, 185.10
0.140.0/22^+, 185.107.120.0/22^+ } AND { 2001:db8::/32^+, 2002::/16^-, 0000::/8^+, fe00::/9^+, ff00::/8^+, 0::/0^49-128, 2a02:b70::/32^+, 2a00:cb40::/32^+ } AND <[AS6
4512-AS65534]>
ripe.db:mp-filter: { 10.0.0.0/8^+, 127.0.0.0/8^+, 169.254.0.0/16^+, 172.16.0.0/12^+, 192.0.2.0/24^+, 192.88.99.0/24^+, 192.168.0.0/16^+, 198.18.0.0/15^+, 0.0.0.0
/0^25-32 } AND { 2001:db8::/32^+, 2002::/16^-, 0000::/8^+, fe00::/9^+, ff00::/8^+, 0::/0^49-128 } AND <[AS64512-AS65534]>
ripe.db:mp-filter: NOT fltr-bogons4 OR <[AS64512-AS65534]> AND ANY
ripe.db:mp-filter: NOT fltr-bogons6 OR <[AS64512-AS65534]> AND ANY
ripe.db:mp-filter: NOT fltr-bogons4 fltr-bogons6 OR <[AS64512-AS65534]> AND ANY |
1 reply
|
I vote for us to not handle this case and the |
Let me try to understand what is going on here.
|
6 replies
|
I think I grok what's going on here. General configuration applied to v4 and v6: Then we have IPv4 bogon filtering and blackholing configuration (similar configuration exists for v6): Finally we have the actual import/export filters: |
|
Is |
|
The impact of the first filters aren't really verifiable from the public BGP dumps, as they just drop routes or set internal variables like Local Preference, which we can't see. I think the only thing we can actually check in this policy is the last block above (where I mentioned "the actual import/export filters"). We should not check that the communities are in the path (they're added in the |
|
|
|
We have some RPSL sets that include PeerAS as their suffix.$ rg ':PeerAS' *
tc.db
169229: accept (PeerAS OR AS53090:AS-CUSTOMERS:PeerAS) AND
169230: <^PeerAS+ AS53090:AS-CUSTOMER:PeerAS*$>
arin.db
18493:import: from AS32408:AS-CLIENTS accept AS32408:RS-ROUTES:PeerAS
18512:import: from AS32413:AS-CUSTOMER accept AS32413:RS-ROUTES:PeerAS
apnic.db.aut-num
19798:import: from AS17895:AS-IX accept AS17895:AS-IX:PeerAS
19799:import: from AS17895:AS-CUSTOMERS accept AS17895:AS-CUSTOMERS:PeerAS
19800:export: to AS17895:AS-UPSTREAMS announce AS17895:AS-CUSTOMERS:PeerAS
19801:export: to AS17895:AS-IX announce AS17895:AS-CUSTOMERS:PeerAS
42251:import: from AS24238:AS-CUSTOMERS action pref=25; accept AS24238:RS-ROUTES:PeerAS
altdb.db
58684:import: from AS12041:AS-PEERS accept AS12041:AS-SET:PeerAS
radb.db
244002:import: from AS11013:AS-CUSTOMERS accept AS11013:RS-ROUTES:PeerAS
244007: accept (PeerAS OR AS11013:AS-CUSTOMER:PeerAS)
244008: AND <^PeerAS+AS11013:AS-CUSTOMER:PeerAS*$>
696579: We also use a route-set for each AS customer to filter receive legal route and prevent errors. The object is of type AS16559:RS-ROUTES:PeerAS where the PeerAS as describe in the RFC will be the AS of the customer and use in our filter. For the customers without ASes, we use AS16559:RS-CUSTOMERS to describe their routes and they will be announce under RealConnect AS number.
696697: accept AS16559:RS-ROUTES:PeerAS;
905765:import: from AS22302:AS-PEERS accept (PeerAS OR AS22302:AS-PEERS:PeerAS) AND NOT (FLTR-INOC-BOGUS OR FLTR-INOC-RFC);
905766:import: from AS22302:AS-CUSTOMERS accept (PeerAS OR AS22302:AS-CUSTOMERS:PeerAS OR AS22302:RS-INOC:PeerAS) AND NOT (FLTR-INOC-BOGUS OR FLTR-INOC-RFC);
905768:mp-import: from AS22302:AS-PEERS accept (PeerAS OR AS22302:AS-PEERS:PeerAS) AND NOT (FLTR-INOC-BOGUS OR FLTR-INOC-RFC)
905769:mp-import: from AS22302:AS-CUSTOMERS accept (PeerAS OR AS22302:AS-CUSTOMERS:PeerAS OR AS22302:RS-INOC:PeerAS) AND NOT (FLTR-INOC-BOGUS OR FLTR-INOC-RFC)
3278543:filter: ((PeerAS OR AS37271:AS-CUSTOMERS:PeerAS) AND {0.0.0.0/0^8-24})
3278563:filter: ((PeerAS^+ OR AS37271:AS-PEERS:PeerAS^+) AND {0.0.0.0/0^8-24})
3716982:import: from AS11722:AS-PEERING accept PeerAS OR AS11722:AS-PEERING:PeerAS
5082057:filter: ((PeerAS OR AS37236:AS-CUSTOMERS:PeerAS) AND {0.0.0.0/0^8-24})
5082077:filter: ((PeerAS^+ OR AS37236:AS-PEERS:PeerAS^+) AND {0.0.0.0/0^8-24})
7612674: accept (PeerAS OR AS5738:AS-PEERS:PeerAS OR AS5738:RS-ROUTES:PeerAS) AND NOT {0.0.0.0/0};
7612676: accept (PeerAS OR AS5738:AS-CUSTOMERS:PeerAS OR AS5738:RS-ROUTES:PeerAS) AND NOT {0.0.0.0/0};
8314818:import: from AS26744:AS-CUSTOMERS accept (PeerAS OR AS26744:AS-CUSTOMERS:PeerAS) AND <^PeerAS+AS26744:AS-CUSTOMERS:PeerAS*$>
8314822:mp-import: from AS26744:AS-CUSTOMERS accept (PeerAS OR AS26744:AS-CUSTOMERS:PeerAS) AND <^PeerAS+AS26744:AS-CUSTOMERS:PeerAS*$>
9275295:import: from AS17077:AS-CUSTOMERS accept (PeerAS OR AS17077:AS-CUSTOMERS:PeerAS) AND <^PeerAS+AS17077:AS-CUSTOMERS:PeerAS*$>
9275299:mp-import: from AS17077:AS-CUSTOMERS accept (PeerAS OR AS17077:AS-CUSTOMERS:PeerAS) AND <^PeerAS+AS17077:AS-CUSTOMERS:PeerAS*$>
11602592: accept (PeerAS OR AS36692:AS-PEERS:PeerAS);
11602632: accept (PeerAS OR AS36692:AS-PEERS:PeerAS);
13518056: accept AS2764:AS-CUSTOMERS:PeerAS AND <^PeerAS+ AS2764:AS-CUSTOMERS:PeerAS~+$>;
13518060: accept <^PeerAS+ AS2764:AS-CUSTOMERS-APF:PeerAS~+$>;
ripe.db
57764:import: from AS8726:AS-PEERING accept <AS8726:AS-PEERING:PeerAS$>
58942:import: from AS8821:AS-CUSTOMERS accept AS8821:AS-CUSTOMERS:PeerAS
58943:import: from AS8821:AS-PEERS accept AS8821:AS-PEERS:PeerAS
58952:mp-import: afi ipv6.unicast from AS8821:AS-CUSTOMERS accept AS8821:AS-CUSTOMERS:PeerAS
58953:mp-import: afi ipv6.unicast from AS8821:AS-PEERS accept AS8821:AS-PEERS:PeerAS
62693:import: from AS9092:AS-PEERS accept AS9092:AS-SET:PeerAS
69219:import: from prng-as5408-grix-peers action pref=105; community.append(5408:1002); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1003) AND <^PeerAS+AS5408:AS-GRIX:PeerAS*$>; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; } # AND (PeerAS^0-27 OR AS5408:AS-GRIX:PeerAS^0-27 OR AS5408:AS-GRIX:PeerAS^0-27); Primary-Backup
86857:mp-import: afi ipv6.unicast from AS47623 at 2001:4D00:0:1::11 action pref=65135; med=0; community.append(8226:1801); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86859:mp-import: afi ipv4.unicast from AS47623 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1801); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86861:mp-import: afi ipv6.unicast from AS47623 at 2001:4D00:0:1::12 action pref=65135; med=0; community.append(8226:1801); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86863:mp-import: afi ipv4.unicast from AS47623 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1801); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86866:import: from AS51693 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1804); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86868:import: from AS51693 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1804); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86871:import: from AS50623 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1809); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86873:import: from AS50623 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1809); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86876:import: from AS48110 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1813); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86878:import: from AS48110 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1813); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86881:import: from AS48008 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1814); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86883:import: from AS48008 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1814); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86886:import: from AS42688 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1817); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86888:import: from AS42688 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1817); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86891:import: from AS50496 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1819); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86893:import: from AS50496 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1819); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86896:import: from AS42991 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1824); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86898:import: from AS42991 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1824); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86912:mp-import: afi ipv6.unicast from AS199673 at 2001:4D00:0:1::11 action pref=65135; med=0; community.append(8226:1916); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86914:mp-import: afi ipv4.unicast from AS199673 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1916); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86916:mp-import: afi ipv6.unicast from AS199673 at 2001:4D00:0:1::12 action pref=65135; med=0; community.append(8226:1916); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86918:mp-import: afi ipv4.unicast from AS199673 at 195.250.64.1 action pref=65135; med=0; community.append(8226:1916); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86920:mp-import: afi ipv4.unicast from AS60592 at 109.68.121.5 action pref=65135; med=0; community.append(8226:1918); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86924:import: from AS199062 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1833); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86926:import: from AS199062 at 195.250.64.12 action pref=65135; med=0; community.append(8226:1833); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86930:import: from AS200896 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1910); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86932:import: from AS202515 at 109.68.121.5 action pref=65135; med=0; community.append(8226:1919); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
86935:import: from AS42109 at 195.250.64.11 action pref=65135; med=0; community.append(8226:1918); accept AS8226:AS-CUST:PeerAS AND {0.0.0.0/0^0-24}
101323:import: from AS8308:AS-Cust-transit action pref=100; accept <AS8308:AS-Customers:PeerAS$>
101326:import: from AS8308:AS-Cust-peering action pref=100; accept <AS8308:AS-Customers:PeerAS$>
101333:import: from AS8308:AS-Peerings action pref=150; accept <AS8308:AS-Peerings:PeerAS$>
103806:import: from AS15547:AS-CUSTOMERS accept AS15547:AS-CUSTOMERS:PeerAS
103807:import: from AS15547:AS-PEERS accept AS15547:AS-PEERS:PeerAS
180616:import: { from AS-ANY accept NOT { 0.0.0.0/0 }; } refine { from AS-ANY action pref=40; accept community(3239:60); from AS-ANY action pref=30; accept community(3239:70); from AS-ANY action pref=10; accept community(3239:90); from AS-ANY action pref=0; accept ANY; } refine { from AS3239:AS-CUST accept (AS3239:AS-IN:PeerAS OR PeerAS) AND (<AS3239:AS-IN:PeerAS$> OR <PeerAS$>); }
180617:export: { to AS3239:AS-CUST announce AS3239:AS-OUT:PeerAS OR AS-SURNET; to AS3239:AS-OUT-FULL announce ANY; }
180618:import: { from AS-ANY action community .= {3239:1000}; accept ANY; } refine { from AS8342 action community .= {3239:201}; accept ANY; from AS2118 action community .= {3239:203}; accept ANY; from AS8324 action community .= {3239:205}; accept ANY; from AS702 action community .= {3239:206}; accept ANY; from AS29304 accept NOT ANY; from AS29648 action community .= {3239:208}; accept ANY; from AS35400 action community .= {3239:209}; accept ANY; } refine { from AS3239:AS-UPSTREAM action pref=25; accept AS3239:RS-PREF:PeerAS OR <AS3239:AS-PREF:PeerAS$>; from AS35400 action pref=26; accept ANY; from AS29648 action pref=26; accept ANY; from AS8324 action pref=27; accept ANY; from AS3239:AS-UPSTREAM action pref=30; accept ANY; from AS-ANY action pref=15; accept AS3239:RS-PREF:PeerAS; from AS-ANY action pref=20; accept (<AS3239:AS-IN:PeerAS$> OR <PeerAS$>) AND NOT { 0.0.0.0/0 }; }
185313: accept <AS1887:AS-Customers:PeerAS$>
185317: accept <AS1887:AS-Peerings:PeerAS$>
294776:import: from AS20647:AS-CUSTOMER action pref=500; accept AS20647:AS-SET:PeerAS
294777:mp-import: afi ipv6.unicast from AS20647:AS-CUSTOMER action pref=500; accept AS20647:AS-SET:PeerAS
294780:import: from AS20647:AS-PEERS action pref=300; accept AS20647:AS-SET:PeerAS
294781:mp-import: afi ipv6.unicast from AS20647:AS-PEERS action pref=300; accept AS20647:AS-SET:PeerAS
313284:import: from AS13030:AS-PEERS accept AS13030:AS-SET:PeerAS
318950:import: { from AS-ANY action community(6774:65231); accept ANY AND NOT AS6774:FLTR-BOGONS; } refine { from AS6774:PRNG-BE-BNIX action community.append(6774:65100); from AS6774:PRNG-DE-DECIX action community.append(6774:65104); from AS6774:PRNG-FR-SFINX action community.append(6774:65102); from AS6774:PRNG-NL-AMSIX action community.append(6774:65101); from AS6774:PRNG-UK-LINX action community.append(6774:65103); accept (PeerAS OR AS6774:AS-PEERS:PeerAS); }
379597:mp-import: afi ipv4.unicast,ipv6.unicast from AS-ARAX:AS-TRANSIT:PeerAS accept ANY
379598:mp-export: afi ipv4.unicast,ipv6.unicast to AS-ARAX:AS-TRANSIT:PeerAS announce AS-ARAX:AS-EXPORT
379602:mp-import: afi ipv4.unicast,ipv6.unicast from AS-ARAX:AS-CUSTOMERS:PeerAS accept (PeerAS OR AS-ARAX:AS-CUSTOMERS:PeerAS)
379603:mp-export: afi ipv4.unicast,ipv6.unicast to AS-ARAX:AS-CUSTOMERS:PeerAS announce ANY
379607:mp-import: afi ipv4.unicast,ipv6.unicast from AS-ARAX:AS-PEERS:PeerAS accept (PeerAS OR AS-ARAX:AS-PEERS:PeerAS)
379608:mp-export: afi ipv4.unicast,ipv6.unicast to AS-ARAX:AS-PEERS:PeerAS announce AS-ARAX:AS-EXPORT
4351891: (AS24665:AS-IN:PeerAS OR PeerAS) AND
4351892: (<AS24665:AS-IN:PeerAS$> OR <PeerAS$>);
4351899: announce (AS24665:AS-OUT:PeerAS
4351914: (AS24665:AS-PEER-IN:PeerAS OR PeerAS) AND
4351915: (<AS24665:AS-PEER-IN:PeerAS$> OR <PeerAS$>);
4351922: announce (AS24665:AS-PEER-OUT:PeerAS AND (NOT AS28890 OR {83.167.0.0/20^20-32, 88.86.192.0/20^20-32}))
7544215:import: from AS20932:AS-PEERING accept AS20932:AS-SET:PeerAS
8400735:import: { from AS-ANY accept NOT {0.0.0.0/0}; } refine { from AS-ANY action pref=0; accept ANY; } refine { from AS29648:AS-CUST accept (AS29648:AS-IN:PeerAS OR PeerAS) AND (<AS29648:AS-IN:PeerAS$> OR <PeerAS$>); }
9344394:import: from AS31016:AS-CUSTOMERS accept (PeerAS or AS31016:AS-CUSTOMERS:PeerAS)
9579892:import: from AS15576:AS-CUSTOMER accept AS15576:AS-CUSTOMER:PeerAS
9579894:mp-import: afi ipv6.unicast from AS15576:AS-CUSTOMER accept AS15576:AS-CUSTOMER:PeerAS
9579907:import: from AS15576:AS-PEERING accept AS15576:AS-PEERING:PeerAS
9579909:mp-import: afi ipv6.unicast from AS15576:AS-PEERING accept AS15576:AS-PEERING:PeerAS
12779928:descr: Parent object. See AS3239:AS-PREF:PeerAS objects further.
12779945:descr: Parent object. See AS3239:RS-PREF:PeerAS objects further.
12806842:descr: AS3239:AS-IN:PeerAS objects is not defined
12806860:descr: AS3239:AS-OUT:PeerAS objects is not defined
12952169:import: from AS34390:AS-CUSTOMERS accept <^AS34390:AS-CUSTOMERS:PeerAS+$>
15111561:descr: AS29648:AS-IN:PeerAS objects is not defined
15119583:descr: AS29648:AS-OUT:PeerAS objects is not defined
16368094:import: from AS39040:AS-CUSTOMER accept AS39040:AS-CUSTOMER:PeerAS
16368096:mp-import: afi ipv6.unicast from AS39040:AS-CUSTOMER accept AS39040:AS-CUSTOMER:PeerAS
16999437:import: from AS39288:AS-TRANSIT accept <^AS39288:AS-TRANSIT:PeerAS+$>
16999439:import: from AS39288:AS-IX accept <^AS39288:AS-IX:PeerAS+$>
24636246:descr: AS24665:AS-OUT:PeerAS objects is not defined
24636264:descr: AS24665:AS-IN:PeerAS objects is not defined
26415169:descr: AS24665:AS-PEER-OUT:PeerAS objects is not defined
26415439:descr: AS24665:AS-PEER-IN:PeerAS objects is not defined
30328662:import: from AS48464:AS-CUSTOMERS accept <^AS48464:AS-CUSTOMERS:PeerAS+$>
45211705:import: from AS197530:AS-TRANSIT accept <^AS197530:AS-TRANSIT:PeerAS+$>
52615272:mp-import: from AS198623:AS-CUSTOMERS accept AS198623:RS-ROUTES:PeerAS
58143428:remarks: rt:64630:199284 - do not announce to any except rt:64630:PeerAS
58143429:remarks: rt:64630:PeerAS - do not announce to PeerAS
58143430:remarks: rt:64631:PeerAS - prepend once to PeerAS
58143431:remarks: rt:64632:PeerAS - prepend twice to PeerAS
58143457:remarks: to AS-ANY action aspath.prepend(AS199284) ; announce extcommunity(rt:64631:PeerAS);
58143458:remarks: to AS-ANY action aspath.prepend(AS199284, AS199284); announce extcommunity(rt:64632:PeerAS);
58143459:remarks: to AS-ANY announce extcommunity(rt:64630:PeerAS) and extcommunity(rt:64630:199284)
58143460:remarks: to AS-ANY announce not extcommunity(64630:PeerAS);
60821181:mp-import: afi ipv4.unicast,ipv6.unicast from AS-ALEXHOST:AS-CUSTOMERS:PeerAS accept PeerAS
60821183:mp-export: afi ipv4.unicast,ipv6.unicast to AS-ALEXHOST:AS-PEERS:PeerAS announce AS-ALEXHOST
67502009:import: from AS-ATDS-SERVICES accept <^AS-ATDS-SERVICES:PeerAS+$>
67502012:mp-import: afi ipv6.unicast from AS-ATDS-SERVICES accept <^AS-ATDS-SERVICES:PeerAS+$>
85994027:import: from AS39533:AS-PEERS accept AS39533:AS-SET:PeerAS
85994029:import: from AS39533:AS-CONNECTED accept AS39533:AS-SET:PeerAS
101919481:mp-export: afi ipv4.unicast,ipv6.unicast to AS-ALEXHOST2:AS-TRANSITS:PeerAS announce AS-ALEXHOST2
105006421:descr: Parent object. See AS39533:AS-SET:PeerAS objects further.
130437059:mp-import: afi any.unicast from AS-AVENACLOUD:AS-TRANSITS:PeerAS accept ANY
130437060:mp-export: afi any.unicast to AS-AVENACLOUD:AS-TRANSITS:PeerAS announce AS-AVENACLOUD:AS-EXPORT
130437064:mp-import: afi any.unicast from AS-AVENACLOUD:AS-CUSTOMERS:PeerAS accept (PeerAS OR AS-AVENACLOUD:AS-CUSTOMERS:PeerAS)
130437065:mp-export: afi any.unicast to AS-AVENACLOUD:AS-CUSTOMERS:PeerAS announce ANY
130437069:mp-import: afi any.unicast from AS-AVENACLOUD:AS-PEERS:PeerAS accept (PeerAS OR AS-AVENACLOUD:AS-PEERS:PeerAS)
130437070:mp-export: afi any.unicast to AS-AVENACLOUD:AS-PEERS:PeerAS announce AS-AVENACLOUD:AS-EXPORTRelated: https://www.rfc-editor.org/rfc/rfc2622#section-5, https://www.rfc-editor.org/rfc/rfc2622#page-19 |
2 replies
|
144 of these. |
|
#49. |
|
|
0 replies
|
Postfixing address prefix set with range operators only appears twice. $ rg '\}\^' *
ripe.db
65492158:filter: {62.16.0.0/19, 79.140.0.0/20, 85.238.96.0/19, 130.0.32.0/19, 176.119.64.0/18, 185.23.104.0/22, 188.115.128.0/18, 195.138.64.0/19, 212.178.0.0/19, 31.31.96.0/19, 37.203.0.0/19}^+
65492246:mp-filter: {2a04:2c00::/29}^+ |
1 reply
|
We can totally skip this. If we were (we aren't!) to implement this, I'd try to create a autogenerated route-set for the prefixes inside the |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Extremely chained
REFINEandEXCEPTinmp-importforAS199284encoLine:All reactions