Poster: Never via route servers: when filtering affects third-party routes

Abstract

IXP route servers redistribute routes among members, facilitating multilateral route exchange [3]. A single announcement reaches every member peering with the route server, so a leaked route can propagate to hundreds of networks in one step. Operators therefore filter unsafe routes, including RPKI-invalid origins [1], prefixes with no matching IRR or RIR object [2], bogons, and prefixes longer than /24 (IPv4) or /48 (IPv6).