Traffic drops with BGP routing

[DarkNate]

rp-filter should be set to loose mode for assymetric routing.

But overall, assymetric routing is bad traffic engineering. What you should do is announce the largest possible aggregates of all your prefixes to both upstreams, equally without prepending or more specifics.

More specifics should be used for DDoS blackholing/scrubbing instead during DDoS mitigation/detection.

Then use something like PathVector for traffic engineering in an automated fashion.

rp-filter is on loose.
Yeah, that is what I’m trying to work towards. announcing all prefixes to both upstreams without prepending. and I announce DDoS blackholing out both sides also.
Not sure how PathVector or similar would fit in.

Step 1: Fix the issue you’re facing here
Step 2: Get full tables from upstream transits
Step 3: Enable loose mode rp-filter
Step 4: Do not use stateful-ness on edge routers
Step 5: Announce prefixes aggregated, equally, no prepends to all transits, IXPs and also PNIs/Bilaterals.
Step 6: Install PathVector on-prem server and configure it to auto traffic engineer your routing based on latency and other parameters of your choice.

For other best practices, follow the guide for ISPs:
http://forum.mikrotik.com/t/how-to-edge-router-and-bng-optimization-for-isps/150007/1