Hi Rubens, others, On Sun, Sep 19, 2021 at 08:06:54PM -0300, Rubens Kuhl wrote:
Our experience in Brazil is that delegated RPKI is not much of an issue provided its software deployment is easy enough. Krill + Lagosta + Up/Down activation + Upwards ROA publishing adds to being really effective.
Good to hear from Brazil! Indeed a number of organizations have worked hard to remove as many barriers as possible towards the Delegated RPKI. Impressive progress. My message was not intended to take away from "Delegated RPKI" deployments (I run one myself!), but rather to suggest that the "Hosted RPKI" Dashboard should _also_ make it possible to certify & publish BGPsec Router keys. I suspect that "Hosted RPKI" will always be popular: clearly many operators feel comfortable outsourcing the issuance & publication of their ROAs to the RIR. I think it is important to study feature gaps between "Hosted" and "Delegated". Kind regards, Job ps. A: What about ASPA? Q: why not both? :-) I'm working to start an IANA "Early Allocation" procedure to obtain codepoints for ASPA. When progress has been made I'll circle back to routing-wg@ in a new thread, unless someone beats me to it. :-)