Along with the redundant BGP internet routers, I’ve always wondered if there was a template of sort for internet facing routers from a enterprise perspective that would cover security and filters that should always be applied, like to keep your AS from becoming a transit AS and just plain old best practice.