Addressing & Routing

Route Filter Generation — Prefix Lists From Routing Registries

This queries internet routing registries and generates the prefix lists and filters a router needs, in the configuration format of the platform you are targeting. The registries are where networks publish which prefixes they legitimately originate, and filters built from that data are what stop you accepting announcements a peer had no right to make.

Why run it

Because hand-maintained filters are wrong. A peer's set of prefixes changes as their customers come and go, and a filter written by hand encodes a moment that has already passed. Too restrictive and you black-hole legitimate traffic; too permissive and you accept and propagate a route leak, which makes you a participant in someone else's incident. Generating from the registry means the filter reflects what is currently published rather than what was true when it was written.

Why automate it

This is the clearest case in this group for automation, because the input changes constantly and independently of you. Registry data is updated whenever any network adjusts its objects, and a filter is stale from the moment it is generated. Regenerating on a schedule and applying the diff is standard practice among networks that take routing security seriously — and the alternative is a manual process that only gets revisited when a peer complains that their new prefix is being dropped.

What it gives you

Filters that track reality instead of encoding a past snapshot, which is both a reachability and a routing-security control. Regenerated automatically, it removes the manual step that is invariably skipped.

Related checks in Addressing & Routing