Using BGP for realtime import and export of OpenBSD spamd entries

More documents

Recommendations

Info

gp bgp is the glue that holds the internet together used to distribute the 400k+ IPv4 routes <strong>of</strong> the Global Routing Table scales incredibly high, <strong>and</strong> incredibly fast very minor feature called “communities” that we will exploit 4/27
gp communities allows you to mark a route with optional site-specific attributes bgp peers can use this to make arbitrary decisions on received routes route: 192.0.2.55/32 community: 65066:42 this is our “secret sauce” 5/27
Page 1 and 2: Using BGP for realtime import and e
Page 3: spamd written by Bob Beck included
Page 7 and 8: openbgpd everything we use is alrea
Page 9 and 10: tying them together exporting IP ad
Page 11 and 12: spamd-source first, select known go
Page 13 and 14: spamd-source whitelist semi-trusted
Page 15 and 16: oute server only accept addresses f
Page 17 and 18: client whitelist adds whitelist ent
Page 19 and 20: client blacklist why not simply use
Page 21 and 22: client blacklist $ cat /usr/local/s
Page 23 and 24: security concerns where do we get t
Page 25 and 26: future work accelerate adding addre
Page 27: Questions? 27/27

Using BGP for realtime import and export of OpenBSD spamd entries

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?