Re: RPKI validation on startup

2019-11-12 Thread Ondrej Zajicek
On Mon, Nov 11, 2019 at 10:41:24AM -0500, Matthias Waehlisch wrote: > On Mon, 11 Nov 2019, Maria Matějka wrote: > > > The problem is also that bird doesn't reevaluate affected routes after > > ROA has changed. This is going to be fixed in near future > > > based on the increasing interest in us

Re: RPKI validation on startup

2019-11-11 Thread Matthias Waehlisch
On Mon, 11 Nov 2019, Maria Matějka wrote: > The problem is also that bird doesn't reevaluate affected routes after > ROA has changed. This is going to be fixed in near future > based on the increasing interest in using route origin validation in BIRD, i highly encourage to fix this rather soo

Re: RPKI validation on startup

2019-11-11 Thread Maria Matějka
Hello, this is due to the RPKI table being empty on startup. As a workaround, I suggest having bgp sessions with delayed start. The problem is also that bird doesn't reevaluate affected routes after ROA has changed. This is going to be fixed in near future, yet now the best thing to do is proba

RPKI validation on startup

2019-11-10 Thread Brooks Swinnerton
Hello, I have RPKI validation working correctly, but it seems that when BIRD first starts it does not reject invalid RPKI routes. If I run `reload in ` everything works great. I suspect this is some sort of race condition in 2.0.7. Has anyone else come across this?