The scourge of excessive AS-SETs
AS-SETs, intended for routing security, have become overly large, undermining their filtering purpose, prompting a need for strategies to manage their size effectively.
MAIN POINTS
- AS-SETs are designed to enhance routing security by specifying allowed routes.
- Overgrowth of AS-SETs leads to ineffective filtering, resembling a whitelist of the routing table.
- The size issue arises from the inclusion of numerous AS numbers, diluting their effectiveness.
- Solutions are needed to manage AS-SET size and maintain their intended security function.
TAKEAWAYS
- Regularly review and prune AS-SETs to ensure they remain effective for routing security.
- Implement stricter criteria for AS number inclusion to prevent unnecessary growth.
- Consider alternative filtering methods if AS-SETs become unmanageable.
- Collaboration among network operators can help address the challenges of oversized AS-SETs.