[AusNOG] MANRS Project - Fixing the Internet's routing security is urgent and requires collaboration

[Roland Dobbins]

On 29 Feb 2016, at 10:07, Paul Wilkins wrote:

> It's not very likely an optional code for US ISP's will have much 
> impact
> down the Australian end of the internet.

It isn't restricted to US ISPs - any operator is free to sign up for 
MANRS.

> Would be very straight forward for the Federal Government to mandate 
> that all local ISPs implement source IP verification.

It isn't that simple.  There are lot of technical barriers (older 
equipment, topological scenarios which complicate matters, etc.) to be 
overcome.  I'm a major advocate of universal source-address validation, 
but it can't be accomplished instantaneously, and without costs (both 
capex and opex).

A phased transition to mandatory source-address validation specifically 
on access networks - e.g., IDC networks and broadband access networks - 
would be something to consider.

But it's far better for operators to do this on their own stick, rather 
than waiting for un-nuanced governmental regulations to be promulgated.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>