Hi, On Mon, Sep 18, 2006 at 06:52:37PM +0200, Oliver Bartels wrote:
On Mon, 18 Sep 2006 18:33:54 +0200, Jeroen Massar wrote:
(who indeed would like to see a scheme like sBGP deployed :)
The sBGP will consume _significantly_ more resources in the network for even a small amount of sBGP prefixes than PI will consume ever.
There is no need to run the sBGP crypto on all routers on all prefixes in realtime. Especially not on "session startup" time - assuming that a significant set of your neighbour routers have been doing sBGP verification on a largish subset of the routes in their tables, doing the verification as a low-prio thing (and dropping BGP prefixes that fail verification) should suffice. Gert Doering -- NetMaster -- Total number of prefixes smaller than registry allocations: 94488 SpaceNet AG Mail: netmaster@Space.Net Joseph-Dollinger-Bogen 14 Tel : +49-89-32356-0 D- 80807 Muenchen Fax : +49-89-32356-234