AS12337 RPKI Validation deployed
I just wanted to let you know that noris network (AS12337) is now validating RPKI information with invalid == reject in our upstream & IXP eBGP sessions. First impression (and impact analysis before the deployment) suggests no customer impact by this. I'll let you know if this changes in the coming weeks. :) Regards Sebastian -- GPG Key: 0x58A2D94A93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant
Sebastian Wiesinger:
I just wanted to let you know that noris network (AS12337) is now validating RPKI information with invalid == reject in our upstream & IXP eBGP sessions. First impression (and impact analysis before the deployment) suggests no customer impact by this. I'll let you know if this changes in the coming weeks. :)
great! thanks for deploying ROV. I'm wondering what that means for RPKI invalids originating from AS12337 https://rpki-validator.ripe.net/announcement-preview?asn=AS12337&prefix=2001:67c:1933::%2F48 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
Hi all, It is indeed good to start considering doing ROV “invalid is reject” on both ingress and egress EBGP routing policy attachment points. Operators will want to consider punching holes in the policy for things like (selective) blackholing so those “invalid” more-specifics can be propagated to others. Kind regards, Job On Mon, Oct 8, 2018 at 20:27 nusenu <nusenu-lists@riseup.net> wrote:
Sebastian Wiesinger:
I just wanted to let you know that noris network (AS12337) is now validating RPKI information with invalid == reject in our upstream & IXP eBGP sessions. First impression (and impact analysis before the deployment) suggests no customer impact by this. I'll let you know if this changes in the coming weeks. :)
great! thanks for deploying ROV.
I'm wondering what that means for RPKI invalids originating from AS12337
https://rpki-validator.ripe.net/announcement-preview?asn=AS12337&prefix=2001:67c:1933::%2F48
-- https://twitter.com/nusenu_ https://mastodon.social/@nusenu
* nusenu <nusenu-lists@riseup.net> [2018-10-08 13:28]:
I'm wondering what that means for RPKI invalids originating from AS12337 https://rpki-validator.ripe.net/announcement-preview?asn=AS12337&prefix=2001:67c:1933::%2F48
Nothing, as this is announced directly from us. As we're not the LIR sponsor for this network there is not much we can do. But we've informed our customer and hopefully he'll take this up with this LIR sponsor. :) Regards Sebastian -- GPG Key: 0x58A2D94A93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant
Hi Sebastian, Happy to hear that. It would be really interesting to know the results after a couple of weeks. On Mon, 8 Oct 2018 at 22:15 Sebastian Wiesinger <sebastian@karotte.org> wrote:
I just wanted to let you know that noris network (AS12337) is now validating RPKI information with invalid == reject in our upstream & IXP eBGP sessions. First impression (and impact analysis before the deployment) suggests no customer impact by this. I'll let you know if this changes in the coming weeks. :)
Regards
Sebastian
-- GPG Key: 0x58A2D94A93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant
participants (4)
-
Aftab Siddiqui -
Job Snijders -
nusenu -
Sebastian Wiesinger