Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Fran via Bird-users
Hey there, > I'm using bird to gather all prefixes from all routers using add-paths > so I can easily do searches on my dashboard and graphically map paths > to destinations and visually see other possible paths that are not > best path. Interesting, how do you do this? > I'm looking into p

Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Nigel Kukard via Bird-users
On 4/29/24 19:33, Job Snijders wrote: On Mon, 29 Apr 2024 at 21:27, Nigel Kukard via Bird-users wrote: Hi there Richard, On 4/29/24 19:14, Richard Laager wrote: Perhaps I am naive, but I assumed one would validate RPKI on the eBGP edge and simply reject INVALID routes. Why

Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Job Snijders via Bird-users
On Mon, 29 Apr 2024 at 21:27, Nigel Kukard via Bird-users < bird-users@network.cz> wrote: > Hi there Richard, > > On 4/29/24 19:14, Richard Laager wrote: > > Perhaps I am naive, but I assumed one would validate RPKI on the eBGP edge > and simply reject INVALID routes. > > Why would one want to ac

Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Nigel Kukard via Bird-users
Hi there Richard, On 4/29/24 19:14, Richard Laager wrote: Perhaps I am naive, but I assumed one would validate RPKI on the eBGP edge and simply reject INVALID routes. Why would one want to accept INVALID at all? If we agree one would reject INVALID, then what is left to tag? For my specific

Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Richard Laager
Perhaps I am naive, but I assumed one would validate RPKI on the eBGP edge and simply reject INVALID routes. Why would one want to accept INVALID at all? If we agree one would reject INVALID, then what is left to tag? -- Richard

Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Ondrej Zajicek via Bird-users
On Sun, Apr 28, 2024 at 01:00:40PM +0200, Job Snijders wrote: > On Sat, Apr 27, 2024 at 03:00:45PM +0200, Ondrej Zajicek via Bird-users wrote: > > On Sat, Apr 27, 2024 at 08:18:18AM +0200, Daniel Suchy via Bird-users wrote: > > > There's internet draft describing in detail, why it's not a good idea

Re: Large communities indicating RPKI VALID status

2024-04-28 Thread Job Snijders via Bird-users
On Sat, Apr 27, 2024 at 03:00:45PM +0200, Ondrej Zajicek via Bird-users wrote: > On Sat, Apr 27, 2024 at 08:18:18AM +0200, Daniel Suchy via Bird-users wrote: > > There's internet draft describing in detail, why it's not a good idea to > > store RPKI validation state inside community variables at al

Re: Large communities indicating RPKI VALID status

2024-04-27 Thread Ondrej Zajicek via Bird-users
On Sat, Apr 27, 2024 at 08:18:18AM +0200, Daniel Suchy via Bird-users wrote: > There's internet draft describing in detail, why it's not a good idea to > store RPKI validation state inside community variables at all.. > > https://www.ietf.org/archive/id/draft-ietf-sidrops-avoid-rpki-state-in-bgp-0

Re: Large communities indicating RPKI VALID status

2024-04-26 Thread Daniel Suchy via Bird-users
There's internet draft describing in detail, why it's not a good idea to store RPKI validation state inside community variables at all.. https://www.ietf.org/archive/id/draft-ietf-sidrops-avoid-rpki-state-in-bgp-00.html - Daniel On 4/27/24 5:05 AM, Nigel Kukard via Bird-users wrote: Hi all,

Re: Large communities indicating RPKI VALID status

2024-04-26 Thread Maria Matejka via Bird-users
Hello Nigel, you can always store this information to custom attributes which are faster than communities, auto-ignored on export and can't leak to your peers. BTW that guide looks quite outdated (regarding e.g. the support of autoreload) and will be even more outdated with BIRD 3 optimized imp

Large communities indicating RPKI VALID status

2024-04-26 Thread Nigel Kukard via Bird-users
Hi all, I was busy reading https://bgpfilterguide.nlnog.net/guides/reject_invalids/ and noticed the following text... Note: REALLY DONT store the validation state inside a bgp_community or bgp_large_community or bgp_ext_community variables. It can cause CPU & memory overload resulting in co