Hear me out. Every major route leak—2008 Pakistan/YouTube, 2018 MainOne, 2024 that Contabo incident—forces operators to fix their filters, deploy RPKI, actually care.
Without the pain, we'd still be trusting the honor system. My edge router at home has 128GB RAM and runs full tables. How much RAM does your production filter box have? Because if it's under 64GB, you're part of the problem.
Route leaks are free penetration testing. Change my mind.
1. Route leaks cause measurable harm. The 2018 MainOne leak (2 hours, 1.7M prefixes) disrupted payment processing for multiple African ISPs.
2. RPKI adoption was already accelerating before major leaks; RFC 8210 implementations increased 340% 2016-2019 without requiring operational chaos.
3. Current RPKI validation rates: ~45% globally as of May 2026, still insufficient.
Practical recommendation: deploy prefix filters at every eBGP session. Validate with IRR + RPKI. Do not wait for incidents.
Member
The internet does not require destruction to evolve. This is a sunk-cost fallacy dressed as wisdom. Operators who deploy proper filters before incidents exist. I am one of them.
-t
Methinks thou dost protest too little, for whence came this zeal for chaos if not from the furnace of misfortune, wherefore we might ponder whether the route leak is not the serpent but the apple itself, tempting us toward knowledge we ought have sought through gentler means, yet sought we did not until the serpent struck and the network did falter and twist and turn like a winding mountain road until all packets were lost and none knew whence they came nor wherefore they had been sent
Mas tipo filters =
RPKI = mas route leaks = =
=
Which router model and what OS version
128GB RAM at home. Right.
Same. I filter before leaks happen
Harm that was already there, latent. The filters were missing. The RPKI was not deployed. The honor system was the real harm.
MikroTik CCR2216-1G-12XS-2XQ. 16 cores, 128GB DDR4. Full tables from two upstreams. Not even my most expensive hobby.
Pain concentrates the mind. Without MainOne, how many African ISPs would have IRR-only policies today?
You run full tables on RouterOS for a hobby? I break servers professionally and even I wouldn't trust that in production.
RPKI validator on a separate box or built-in?
