Uploaded June 2025 | Updated September 2026, 1 week ago
An AS-SET is a special object that represents a group of ASNs and forms the basis for IRR-based route filtering. However, many AS-SETs in circulation today have grown so big that they effectively whitelist much of the routing table, rendering them ineffective. According to recent analysis, there are currently 2,192 AS-SETs which expand to over 1,000 ASNs each!
In this talk, we'll describe what an AS-SET is, its role in route filtering, and how to deal with excessively large AS-SETs.
Doug Madory: Doug Madory is the Director of Internet Analysis for Kentik where he works on Internet infrastructure analysis. The Washington Post dubbed him “The Man who can see the Internet" for his reputation in identifying significant developments in the structure of the Internet. Doug is regularly quoted by major news outlets about developments ranging from national blackouts to BGP hijacks to the activation of submarine cables. Prior to Kentik, he was the lead analyst for Oracle's Internet Intelligence team (formerly Dyn Research and Renesys).
Speaker Doug Madory - Kentik
An AS-SET is a special object that represents a group of ASNs and forms the basis for IRR-based route filtering. However, many AS-SETs in circulation today have grown so big that they effectively whitelist much of the routing table, rendering them ineffective. According to recent analysis, there are currently 2,192 AS-SETs which expand to over 1,000 ASNs each!
In this talk, we'll describe what an AS-SET is, its role in route filtering, and how to deal with excessively large AS-SETs.
Doug Madory: Doug Madory is the Director of Internet Analysis for Kentik where he works on Internet infrastructure analysis. The Washington Post dubbed him “The Man who can see the Internet" for his reputation in identifying significant developments in the structure of the Internet. Doug is regularly quoted by major news outlets about developments ranging from national blackouts to BGP hijacks to the activation of submarine cables. Prior to Kentik, he was the lead analyst for Oracle's Internet Intelligence team (formerly Dyn Research and Renesys).
Speaker Doug Madory - Kentik
