Brian E Carpenter wrote on 06/12/2018 22:05:
Are you saying that*every* router in a carrier network needs to perform filtering?
every interface to a second- or a third-party needs filter rules applied, yes. In practice, this means deploying ACLs on everything except for devices acting in a pure core role.
Nick